SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Encfs | Arg0 | * | 1.6.0 (including) |
| Encfs | Arg0 | 1.4.0 (including) | 1.4.0 (including) |
| Encfs | Arg0 | 1.4.1 (including) | 1.4.1 (including) |
| Encfs | Arg0 | 1.4.1.1 (including) | 1.4.1.1 (including) |
| Encfs | Arg0 | 1.4.2 (including) | 1.4.2 (including) |
| Encfs | Arg0 | 1.5.0 (including) | 1.5.0 (including) |
| Encfs | Ubuntu | artful | * |
| Encfs | Ubuntu | dapper | * |
| Encfs | Ubuntu | hardy | * |
| Encfs | Ubuntu | jaunty | * |
| Encfs | Ubuntu | karmic | * |
| Encfs | Ubuntu | lucid | * |
| Encfs | Ubuntu | maverick | * |
| Encfs | Ubuntu | natty | * |
| Encfs | Ubuntu | oneiric | * |
| Encfs | Ubuntu | precise | * |
| Encfs | Ubuntu | quantal | * |
| Encfs | Ubuntu | raring | * |
| Encfs | Ubuntu | saucy | * |
| Encfs | Ubuntu | upstream | * |
| Encfs | Ubuntu | utopic | * |
| Encfs | Ubuntu | vivid | * |
| Encfs | Ubuntu | wily | * |
| Encfs | Ubuntu | yakkety | * |
| Encfs | Ubuntu | zesty | * |