medium4.3
CVE-2013-4134
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to …
Impact
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openafs | Openafs | through 1.4.14 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Debian | Debian Linux | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2013/dsa-2729
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt
- http://www.debian.org/security/2013/dsa-2729
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt