Vulnerability in Openafs
CVE-2013-4134
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.008 (51.6th percentile) — read the EPSS interpretation.
Affected products
- Openafs — versions 1.0, 1.0.1, 1.0.2
- Debian Debian_linux — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)