Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
BID:58808
Info
Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
| Bugtraq ID: | 58808 |
| Class: | Design Error |
| CVE: |
CVE-2012-4578 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 20 2012 12:00AM |
| Updated: | Aug 20 2012 12:00AM |
| Credit: | Fabian Keil |
| Vulnerable: |
Pawel Jakub Dawidek Geli 7 Pawel Jakub Dawidek Geli 4 |
| Not Vulnerable: | |
Discussion
Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
Geli is prone to a security-bypass weakness.
An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible.
Geli is prone to a security-bypass weakness.
An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible.
Exploit / POC
Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Geli CVE-2012-4578 Insecure Master Key Generation Security Bypass Weakness
References:
References:
- geli Homepage (Pawel Jakub Dawidek)
- geli(4) weak master key generation on -CURRENT (FreeBSD)