CVE-2013-7252 | BDVDB-2026-67451 Detail
Description#
kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/
- http://www.securityfocus.com/bid/67716
- https://www.kde.org/info/security/advisory-20150109-1.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=1048168
- http://www.openwall.com/lists/oss-security/2014/01/02/3
- https://security.gentoo.org/glsa/201606-19
- http://www.openwall.com/lists/oss-security/2015/01/09/7
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.