Lucene search
HistoryNov 05, 2013 - 9:55 p.m.
CVE-2013-4134
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
59.3%
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Affected configurations
Node
openafsopenafsRange≤1.4.14
ORopenafsopenafsMatch1.0
ORopenafsopenafsMatch1.0.1
ORopenafsopenafsMatch1.0.2
ORopenafsopenafsMatch1.0.3
ORopenafsopenafsMatch1.0.4
ORopenafsopenafsMatch1.0.4a
ORopenafsopenafsMatch1.1
ORopenafsopenafsMatch1.1.0
ORopenafsopenafsMatch1.1.1
ORopenafsopenafsMatch1.1.1a
ORopenafsopenafsMatch1.2
ORopenafsopenafsMatch1.2.1
ORopenafsopenafsMatch1.2.2
ORopenafsopenafsMatch1.2.2a
ORopenafsopenafsMatch1.2.2b
ORopenafsopenafsMatch1.2.3
ORopenafsopenafsMatch1.2.4
ORopenafsopenafsMatch1.2.5
ORopenafsopenafsMatch1.2.6
ORopenafsopenafsMatch1.2.7
ORopenafsopenafsMatch1.2.8
ORopenafsopenafsMatch1.2.9
ORopenafsopenafsMatch1.2.10
ORopenafsopenafsMatch1.2.11
ORopenafsopenafsMatch1.2.13
ORopenafsopenafsMatch1.3
ORopenafsopenafsMatch1.3.1
ORopenafsopenafsMatch1.3.2
ORopenafsopenafsMatch1.3.5
ORopenafsopenafsMatch1.3.70
ORopenafsopenafsMatch1.3.74
ORopenafsopenafsMatch1.3.77
ORopenafsopenafsMatch1.3.81
ORopenafsopenafsMatch1.4
ORopenafsopenafsMatch1.4.0
ORopenafsopenafsMatch1.4.1
ORopenafsopenafsMatch1.4.2
ORopenafsopenafsMatch1.4.3
ORopenafsopenafsMatch1.4.4
ORopenafsopenafsMatch1.4.5
ORopenafsopenafsMatch1.4.6
ORopenafsopenafsMatch1.4.7
ORopenafsopenafsMatch1.4.7_pre1
ORopenafsopenafsMatch1.4.7_pre2
ORopenafsopenafsMatch1.4.7_pre3
ORopenafsopenafsMatch1.4.7_pre4
ORopenafsopenafsMatch1.4.7_pre5
ORopenafsopenafsMatch1.4.8
ORopenafsopenafsMatch1.4.8_pre1
ORopenafsopenafsMatch1.4.8_pre2
ORopenafsopenafsMatch1.4.8_pre3
ORopenafsopenafsMatch1.4.12
ORopenafsopenafsMatch1.6.0
ORopenafsopenafsMatch1.6.1
ORopenafsopenafsMatch1.6.2
ORopenafsopenafsMatch1.6.2.1
ORopenafsopenafsMatch1.6.3
ORopenafsopenafsMatch1.6.4
ORopenafsopenafsMatch1.7.1
ORopenafsopenafsMatch1.7.2
ORopenafsopenafsMatch1.7.3
ORopenafsopenafsMatch1.7.4
ORopenafsopenafsMatch1.7.8
ORopenafsopenafsMatch1.7.10
ORopenafsopenafsMatch1.7.11
ORopenafsopenafsMatch1.7.12
ORopenafsopenafsMatch1.7.13
ORopenafsopenafsMatch1.7.14
ORopenafsopenafsMatch1.7.15
ORopenafsopenafsMatch1.7.16
ORopenafsopenafsMatch1.7.17
ORopenafsopenafsMatch1.7.18
ORopenafsopenafsMatch1.7.19
ORopenafsopenafsMatch1.7.20
ORopenafsopenafsMatch1.7.21
ORopenafsopenafsMatch1.7.22
ORopenafsopenafsMatch1.7.23
ORopenafsopenafsMatch1.7.24
ORopenafsopenafsMatch1.7.25
Node
debiandebian_linuxMatch7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openafs | openafs | * | cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:* |
| openafs | openafs | 1.0 | cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:* |
| openafs | openafs | 1.0.1 | cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:* |
| openafs | openafs | 1.0.2 | cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:* |
| openafs | openafs | 1.0.3 | cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:* |
| openafs | openafs | 1.0.4 | cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:* |
| openafs | openafs | 1.0.4a | cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:* |
| openafs | openafs | 1.1 | cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:* |
| openafs | openafs | 1.1.0 | cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:* |
| openafs | openafs | 1.1.1 | cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:* |
Related
nessus
nessus
freebsd
freebsd
openafs -- single-DES cell-wide key brute force vulnerability
2013-07-24 00:00:00
cve
cve
CVE-2013-4134
2013-11-05 21:55:08
debiancve
debiancve
CVE-2013-4134
2013-11-05 21:55:08
ubuntucve
ubuntucve
CVE-2013-4134
2013-11-05 00:00:00
prion
prion
Design/Logic Flaw
2013-11-05 21:55:00
cvelist
cvelist
CVE-2013-4134
2013-11-05 21:00:00
openvas
openvas
Debian Security Advisory DSA 2729-1 (openafs - several vulnerabilities)
2013-07-28 00:00:00
Debian: Security Advisory (DSA-2729-1)
2013-07-27 00:00:00
Gentoo Security Advisory GLSA 201404-05
2015-09-29 00:00:00
securityvulns
securityvulns
OpenAFS security vulnerabilities
2013-07-29 00:00:00
[SECURITY] [DSA 2729-1] openafs security update
2013-07-29 00:00:00
debian
debian
[SECURITY] [DSA 2729-1] openafs security update
2013-07-28 21:13:38
gentoo
gentoo
OpenAFS: Multiple vulnerabilities
2014-04-07 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
59.3%
Related for NVD:CVE-2013-4134