CVE-2013-4134

2013-11-0500:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

59.3%

JSON

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses
weak encryption (DES) for Kerberos keys, which makes it easier for remote
attackers to obtain the service key.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/openafs/+bug/1204195>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchopenafs< 1.4.12+dfsg-3+ubuntu0.3UNKNOWN
ubuntu12.04noarchopenafs< 1.6.1-1+ubuntu0.2UNKNOWN
ubuntu12.10noarchopenafs< 1.6.1-2+ubuntu2.1UNKNOWN
ubuntu13.04noarchopenafs< 1.6.2-1+ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	openafs	< 1.4.12+dfsg-3+ubuntu0.3	UNKNOWN
ubuntu	12.04	noarch	openafs	< 1.6.1-1+ubuntu0.2	UNKNOWN
ubuntu	12.10	noarch	openafs	< 1.6.1-2+ubuntu2.1	UNKNOWN
ubuntu	13.04	noarch	openafs	< 1.6.2-1+ubuntu2.1	UNKNOWN