VDB
CVE-2010-3073
CVE-2010-3073
PUBLISHED
CVSS 2.0999999046325684 LOW
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
EPSS 0.71% · 53.4th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.71%
53.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| arg0 | encfs | 0, 1.4.0, 1.4.1 |
Timeline
- Sep 17, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 30, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 16, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 31, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 15, 2023 EPSS Score
- Apr 10, 2023 EPSS Score
- Jun 3, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
References
- 41158 third-party-advisory
- http://code.google.com/p/encfs/source/detail?r=59 url
- FEDORA-2010-14268 vendor-advisory
- 41478 third-party-advisory
- FEDORA-2010-14200 vendor-advisory
- [oss-security] 20100905 Re: CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS mailing-list
- ADV-2010-2414 vdb
- FEDORA-2010-14254 vendor-advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html technical
- http://www.openwall.com/lists/oss-security/2010/09/07/8 technical
- https://nvd.nist.gov/vuln/detail/CVE-2010-3073 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=630460 url
- http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html url
- http://www.openwall.com/lists/oss-security/2010/09/05/3 url