kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kwallet: crypto misuse (CVE-2013-7252)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201606-19 (kwalletd: Information disclosure)

    Kwalletd in KWallet uses Blowfish with ECB mode instead of CBC mode when       encrypting the password store.
  Impact :

    Local attackers, with access to the password store, could conduct a       codebook attack in order to obtain confidential passwords.
  Workaround :

    There is no known workaround at this time.

kdebase4-runtime has been updated to fix one security issue :

  - Added gpg based encryption support to kwallet.
    (bnc#857200). (CVE-2013-7252)

Pull in upstream fixes for: CVE-2013-7252 kwallet: crypto misuse, and kio_sftp corruption

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Valentin Rusu reports :

Until KDE Applications 14.12.0, kwalletd incorrectly handled CBC encryption blocks when encrypting secrets in kwl files. The secrets were still encrypted, but the result binary data corresponded to an ECB encrypted block instead of CBC.

The ECB encryption algorithm, even if it'll scramble user data, will produce same encrypted byte sequence for the same input text. As a result, attackers may eventually find-out the encrypted text.

ID	Name	Product	Family	Severity
199990	RHEL 6 : kdebase-runtime (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
91864	GLSA-201606-19 : kwalletd: Information disclosure	Nessus	Gentoo Local Security Checks	medium
81909	SuSE 11.3 Security Update : kdebase4-runtime (SAT Patch Number 10404)	Nessus	SuSE Local Security Checks	medium
80974	Fedora 20 : kde-runtime-4.14.3-3.fc20 (2015-0564)	Nessus	Fedora Local Security Checks	medium
80537	FreeBSD : kde-runtime -- incorrect CBC encryption handling (7a8a74d1-9c34-11e4-a40b-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	medium
80534	Fedora 21 : kde-runtime-4.14.3-3.fc21 (2015-0569)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-7252

high

Tenable Plugins

critical

medium

medium

medium

medium

medium