EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation

Author: Micha Riser
type: local
platform: linux
port: 
date_added: 2010-08-26 
date_updated: 2019-03-28 
verified: 1 
codes: CVE-2010-3073;OSVDB-68076 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/42779/info

EncFS is prone to design errors in its cryptographic implementation.

Three flaws have been identified that contribute to a weakening of the protections provided under CBC/CFB cipher mode.

Attackers may leverage these weaknesses to attack encrypted files through watermarking or other techniques. Successful attacks may disclose sensitive information.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34537.tar.gz