Lucene search
+L

109 matches found

Exploit DB
Exploit DB
•added 2010/08/26 12:00 a.m.•34 views

EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation

source: https://www.securityfocus.com/bid/42779/info EncFS is prone to design errors in its cryptographic implementation. Three flaws have been identified that contribute to a weakening of the protections provided under CBC/CFB cipher mode. Attackers may leverage these weaknesses to attack...

2.1CVSS5.2AI score0.00713EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2008/09/04 12:00 a.m.•53 views

FreeBSD Ports: gnupg

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS6.6AI score0.02946EPSS
SaveExploits0References4
NVD
NVD
•added 2005/05/02 4:00 a.m.•30 views

CVE-2005-0366

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...

5CVSS6.3AI score0.02946EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2005/05/02 4:00 a.m.•27 views

CVE-2005-0366

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...

5CVSS5.9AI score0.02946EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2005/03/17 12:00 a.m.•47 views

OpenPGP/GnuPG chosen ciphertext cryptography attack

With CFB mode encryption attacker can recover part of the plaintext if 2 first bytes of the message block are known...

4.9AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2005/02/11 5:00 a.m.•88 views

CVE-2005-0366

CVE-2005-0366 concerns OpenPGP/GnuPG where the integrity check feature, when decrypting a message encrypted with CF B mode, can allow a remote attacker to recover part of the plaintext through a chosen-ciphertext attack if the first two bytes of a message block are known and an oracle reveals whe...

5CVSS6.2AI score0.02946EPSS
SaveExploits0References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/11 12:00 a.m.•4 views

CVE-2005-0366: Inadequate Encryption Strength

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...

5CVSS5.8AI score0.02946EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2004/08/20 12:00 a.m.•21 views

SSH < 1.2.25 CBC/CFB Data Stream Injection

Binary data 1978.prm...

5CVSS7.3AI score0.03501EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•12 views

CVE-1999-1085: Undefined Security Weakness

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...

5CVSS5.9AI score0.03501EPSS
SaveExploits0References1
Rows per page
Query Builder