CVE-2010-3073

SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.

CVSS v2.0 NVD

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.71% chance of exploitation in the next 30 days, 53rd percentile

Published

2010-09-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34537

Security advisories

• http://secunia.com/advisories/41158
• http://secunia.com/advisories/41478
• http://www.vupen.com/english/advisories/2010/2414

References

• CVE Record
• NVD entry