CVEvulnerability

CVE-2010-3075

5.0 MEDIUM Published 2010-09-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-310

Description

EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte.

Affected configurations

• arg0 encfs (<= 1.6.0) • arg0 encfs 1.4.0 • arg0 encfs 1.4.1 • arg0 encfs 1.4.1.1 • arg0 encfs 1.4.2 • arg0 encfs 1.5.0

Related

Weakness · not in database (1)

References