CVEvulnerability
CVE-2010-3073
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
Affected configurations
• arg0 encfs (<= 1.6.0)
• arg0 encfs 1.4.0
• arg0 encfs 1.4.1
• arg0 encfs 1.4.1.1
• arg0 encfs 1.4.2
• arg0 encfs 1.5.0
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html archives.neohapsis.com
- http://code.google.com/p/encfs/source/detail?r=59 code.google.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047798.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/41158 Vendor Advisory
- http://secunia.com/advisories/41478 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2010/09/05/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/09/06/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/09/07/8 www.openwall.com
- http://www.vupen.com/english/advisories/2010/2414 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=630460 bugzilla.redhat.com
- http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html archives.neohapsis.com
- http://code.google.com/p/encfs/source/detail?r=59 code.google.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047798.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/41158 Vendor Advisory
- http://secunia.com/advisories/41478 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2010/09/05/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/09/06/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/09/07/8 www.openwall.com
- http://www.vupen.com/english/advisories/2010/2414 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=630460 bugzilla.redhat.com