NVD

Id
41988  
Name
CVE-2013-7252  
Description
kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2015-01-18  
Modified Date
2016-08-02  
Seq
2013-7252  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211907 41988 CVE-2013-7252 http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/  View
211908 41988 CVE-2013-7252 [oss-security] 20140102 kwallet crypto misuse  View
211909 41988 CVE-2013-7252 [oss-security] 20150109 Re: CVE Request: kwallet: incorrect CBC encryption handling  View
211910 41988 CVE-2013-7252 67716  View
211911 41988 CVE-2013-7252 https://bugzilla.redhat.com/show_bug.cgi?id=1048168  View
211912 41988 CVE-2013-7252 GLSA-201606-19  View
211913 41988 CVE-2013-7252 https://www.kde.org/info/security/advisory-20150109-1.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25150 JVNDB-2013-006727 KDE Applications の KWallet の kwalletd におけるパスワードを推測される脆弱性 KDE Applications の KWallet の kwalletd は、パスワード格納を暗号化する際、CBC モードの代わりに ECB モードで Blowfish を使用するため、パスワードを推測される脆弱性が存在します。 CVE-2013-7252 67194 CVE-2013-7252 41988 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006727.html 2013-07-24 2015-01-23 View