Unrated severityNVD Advisory· Published Nov 5, 2013· Updated Jun 16, 2026
CVE-2013-4135
CVE-2013-4135
Description
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.4:*:*:*:*:*:*:*
- (no CPE)range: <1.6.5
Patches
Vulnerability mechanics
References
3- www.debian.org/security/2013/dsa-2729nvdThird Party Advisory
- www.openafs.org/pages/security/OPENAFS-SA-2013-004.txtnvdVendor Advisory
- www.mandriva.com/security/advisoriesnvdBroken Link
News mentions
0No linked articles in our index yet.