Unrated severityNVD Advisory· Published Nov 5, 2013· Updated Apr 29, 2026
CVE-2013-4135
CVE-2013-4135
Description
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
7cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:openafs:openafs:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:openafs:openafs:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.debian.org/security/2013/dsa-2729nvdThird Party Advisory
- www.openafs.org/pages/security/OPENAFS-SA-2013-004.txtnvdVendor Advisory
- www.mandriva.com/security/advisoriesnvdBroken Link
News mentions
0No linked articles in our index yet.