4.3

CVE-2013-4135

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openafs ≫ Openafs Version1.6.0
Openafs ≫ Openafs Version1.6.1
Openafs ≫ Openafs Version1.6.2
Openafs ≫ Openafs Version1.6.2.1
Openafs ≫ Openafs Version1.6.3
Openafs ≫ Openafs Version1.6.4
Debian ≫ Debian Linux Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.86% 0.764
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
Broken Link
http://www.debian.org/security/2013/dsa-2729
Third Party Advisory
http://www.openafs.org/pages/security/OPENAFS-SA-2013-004.txt
Vendor Advisory