OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
References
| Link | Resource |
|---|---|
| http://www.debian.org/security/2013/dsa-2729 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 | Broken Link |
| http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt | Vendor Advisory |
| http://www.debian.org/security/2013/dsa-2729 | Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 | Broken Link |
| http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2013-11-05 21:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-4134
Mitre link : CVE-2013-4134
CVE.ORG link : CVE-2013-4134
JSON object : View
Products Affected
openafs
- openafs
debian
- debian_linux
CWE
CWE-310
Cryptographic Issues
