EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte.

This update of encfs fixes :

  - CVE-2010-3073: CVSS v2 Base Score: 1.9     (AV:L/AC:M/Au:N/C:P/I:N/A:N): Cryptographic Issues     (CWE-310): encfs Only 32 bit of file IV used

  - CVE-2010-3074: CVSS v2 Base Score: 1.9     (AV:L/AC:M/Au:N/C:P/I:N/A:N): Cryptographic Issues     (CWE-310): encfs Watermarking attack

The patch for CVE-2010-3075 (Last block with single byte is insecure) was not applied because upstream disabled it by default, expect for expert mode.

Ver. 1.7.2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75476	openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1)	Nessus	SuSE Local Security Checks	medium
53711	openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1)	Nessus	SuSE Local Security Checks	medium
53656	openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1)	Nessus	SuSE Local Security Checks	medium
49245	Fedora 13 : fuse-encfs-1.7.2-1.fc13 (2010-14268)	Nessus	Fedora Local Security Checks	medium
49244	Fedora 12 : fuse-encfs-1.7.2-1.fc12 (2010-14254)	Nessus	Fedora Local Security Checks	medium
49241	Fedora 14 : fuse-encfs-1.7.2-1.fc14 (2010-14200)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-3075

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium