NVD

Id
14495  
Name
CVE-2010-3075  
Description
EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-17  
Modified Date
2010-09-20  
Seq
2010-3075  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80257 14495 CVE-2010-3075 20100826 Multiple Vulnerabilities in EncFS  View
80258 14495 CVE-2010-3075 FEDORA-2010-14268  View
80259 14495 CVE-2010-3075 FEDORA-2010-14254  View
80260 14495 CVE-2010-3075 FEDORA-2010-14200  View
80261 14495 CVE-2010-3075 http://www.arg0.net/encfs  View
80262 14495 CVE-2010-3075 [oss-security] 20100905 CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS  View
80263 14495 CVE-2010-3075 [oss-security] 20100905 Re: CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS  View
80264 14495 CVE-2010-3075 [oss-security] 20100907 Re: CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS  View
80265 14495 CVE-2010-3075 ADV-2010-2414  View
80266 14495 CVE-2010-3075 https://bugzilla.redhat.com/show_bug.cgi?id=630460  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37234 JVNDB-2010-003019 EncFS における重要な情報を取得される脆弱性 EncFS には、同様の初期化要因でCFB 暗号手順により複数のブロックが暗号化されるため、重要な情報を取得されやすい脆弱性が存在します。 CVE-2010-3075 45655 CVE-2010-3075 14495 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003019.html 2010-09-17 2012-03-27 View