CVE-2013-7252
- State
- Published
- Severity
- Not scored
- Published
- Jan 18, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jan 2, 2014
Description
kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/
- 67716vdb-entry
- https://www.kde.org/info/security/advisory-20150109-1.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=1048168
- [oss-security] 20140102 kwallet crypto misusemailing-list
- GLSA-201606-19vendor-advisory
- [oss-security] 20150109 Re: CVE Request: kwallet: incorrect CBC encryption handlingmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.