CVEvulnerability
CVE-2013-4134
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Affected configurations
• openafs openafs (<= 1.4.14)
• openafs openafs 1.0
• openafs openafs 1.0.1
• openafs openafs 1.0.2
• openafs openafs 1.0.3
• openafs openafs 1.0.4
• openafs openafs 1.0.4a
• openafs openafs 1.1
• openafs openafs 1.1.0
• openafs openafs 1.1.1
• openafs openafs 1.1.1a
• openafs openafs 1.2
• openafs openafs 1.2.1
• openafs openafs 1.2.2
• openafs openafs 1.2.2a
• openafs openafs 1.2.2b
• openafs openafs 1.2.3
• openafs openafs 1.2.4
• openafs openafs 1.2.5
• openafs openafs 1.2.6
• openafs openafs 1.2.7
• openafs openafs 1.2.8
• openafs openafs 1.2.9
• openafs openafs 1.2.10
• openafs openafs 1.2.11
• openafs openafs 1.2.13
• openafs openafs 1.3
• openafs openafs 1.3.1
• openafs openafs 1.3.2
• openafs openafs 1.3.5
• openafs openafs 1.3.70
• openafs openafs 1.3.74
• openafs openafs 1.3.77
• openafs openafs 1.3.81
• openafs openafs 1.4
• openafs openafs 1.4.0
• openafs openafs 1.4.1
• openafs openafs 1.4.2
• openafs openafs 1.4.3
• openafs openafs 1.4.4
• openafs openafs 1.4.5
• openafs openafs 1.4.6
• openafs openafs 1.4.7
• openafs openafs 1.4.7 pre1
• openafs openafs 1.4.7 pre2
• openafs openafs 1.4.7 pre3
• openafs openafs 1.4.7 pre4
• openafs openafs 1.4.7 pre5
• openafs openafs 1.4.8
• openafs openafs 1.4.8 pre1
• openafs openafs 1.4.8 pre2
• openafs openafs 1.4.8 pre3
• openafs openafs 1.4.12
• openafs openafs 1.6.0
• openafs openafs 1.6.1
• openafs openafs 1.6.2
• openafs openafs 1.6.2.1
• openafs openafs 1.6.3
• openafs openafs 1.6.4
• openafs openafs 1.7.1
… and 21 more
Related
Weakness · not in database (1)
References
- http://www.debian.org/security/2013/dsa-2729 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 Broken Link
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt Vendor Advisory
- http://www.debian.org/security/2013/dsa-2729 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 Broken Link
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt Vendor Advisory