CVE-2013-7252

Опубликовано: 18 янв. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.

Ссылки

http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/
Exploit
http://www.openwall.com/lists/oss-security/2014/01/02/3
http://www.openwall.com/lists/oss-security/2015/01/09/7
http://www.securityfocus.com/bid/67716
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1048168
Issue Tracking
https://security.gentoo.org/glsa/201606-19
Third Party Advisory
https://www.kde.org/info/security/advisory-20150109-1.txt
Patch
Vendor Advisory
http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/
Exploit
http://www.openwall.com/lists/oss-security/2014/01/02/3
http://www.openwall.com/lists/oss-security/2015/01/09/7
http://www.securityfocus.com/bid/67716
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1048168
Issue Tracking
https://security.gentoo.org/glsa/201606-19
Third Party Advisory
https://www.kde.org/info/security/advisory-20150109-1.txt
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kde:kde_applications:*:*:*:*:*:*:*:*

Версия до 14.11.3 (включая)

EPSS

Процентиль: 67%

0.00535

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2013-7252

ubuntu

около 11 лет назад

CVE-2013-7252

redhat

больше 12 лет назад

CVE-2013-7252

debian

около 11 лет назад

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ...

SUSE-SU-2015:0512-1

suse-cvrf

почти 11 лет назад

Security update for kdebase4-runtime

GHSA-5ww8-6grp-mrmx

github

больше 3 лет назад

EPSS

Процентиль: 67%

0.00535

Низкий

5 Medium

CVSS2

Дефекты

CWE-310