EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2010-3073 | 26 Aug 201000:00 | – | circl |
 | CVE-2010-3073 | 17 Sep 201017:46 | – | cve |
 | CVE-2010-3073 | 17 Sep 201017:46 | – | cvelist |
 | CVE-2010-3073 | 17 Sep 201017:46 | – | debiancve |
 | EUVD-2010-3075 | 7 Oct 202500:30 | – | euvd |
 | Fedora 14 : fuse-encfs-1.7.2-1.fc14 (2010-14200) | 16 Sep 201000:00 | – | nessus |
| Fedora 12 : fuse-encfs-1.7.2-1.fc12 (2010-14254) | 16 Sep 201000:00 | – | nessus |
| Fedora 13 : fuse-encfs-1.7.2-1.fc13 (2010-14268) | 16 Sep 201000:00 | – | nessus |
| openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1) | 5 May 201100:00 | – | nessus |
| openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1) | 5 May 201100:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/42779/info
EncFS is prone to design errors in its cryptographic implementation.
Three flaws have been identified that contribute to a weakening of the protections provided under CBC/CFB cipher mode.
Attackers may leverage these weaknesses to attack encrypted files through watermarking or other techniques. Successful attacks may disclose sensitive information.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34537.tar.gzData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Mar 2019 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 22.1
EPSS0.00713