CVE-2010-3073
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when...
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
Exploit likelihood
What each source reports
NVD Score used
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
CVE-2010-3073- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
CVE-2010-3073- Updated
- 2026-11-02
EUVDEUVD-2010-3075 No score
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
EUVD-2010-3075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gr5x-6f83-c4g4 No score
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when...
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
GHSA-gr5x-6f83-c4g4- Updated
- 2026-11-02
OSV No score
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
CVE-2010-3073- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3073 No score
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
- Record
DEBIAN-CVE-2010-3073- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation | 2010-08-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3073 is a low vulnerability (CVSS 2.1) in Arg0 Encfs, published September 17, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in encfs 1.7.2-1.
References
secunia.com/advisories/41158
bugzilla.redhat.com/show_bug.cgi?id=630460
code.google.com/p/encfs/source/detail?r=59
lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html
Show 10 moreShow less
lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html
openwall.com/lists/oss-security/2010/09/05/3
vupen.com/english/advisories/2010/2414
nvd.nist.gov/vuln/detail/CVE-2010-3073
github.com/advisories/GHSA-gr5x-6f83-c4g4
security-tracker.debian.org/tracker/CVE-2010-3073