EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation

EDB-ID:

34537




Platform:

Linux

Date:

2010-08-26


source: https://www.securityfocus.com/bid/42779/info

EncFS is prone to design errors in its cryptographic implementation.

Three flaws have been identified that contribute to a weakening of the protections provided under CBC/CFB cipher mode.

Attackers may leverage these weaknesses to attack encrypted files through watermarking or other techniques. Successful attacks may disclose sensitive information. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34537.tar.gz