CVE-2013-7252

Exploit

EPSS 0.54%
Veröffentlicht 18.01.2015 18:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Kde ≫ Kde Applications Version <= 14.11.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.54%	0.647

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/

Exploit

http://www.openwall.com/lists/oss-security/2014/01/02/3

http://www.openwall.com/lists/oss-security/2015/01/09/7

http://www.securityfocus.com/bid/67716

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1048168

Issue Tracking

https://security.gentoo.org/glsa/201606-19

Third Party Advisory

https://www.kde.org/info/security/advisory-20150109-1.txt

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-7252

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-7252

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-7252

EUVD