CVE-2013-4134
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-4134
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM OpenAFS 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenAFS是一套分布式文件系统，它允许系统之间通过局域网和广域网来分享档案和资源。 OpenAFS中存在安全漏洞，该漏洞源于程序对Kerberos密钥使用弱加密算法。远程攻击者可利用该漏洞获取服务密钥。以下版本受到影响：OpenAFS 1.4.15之前的版本，1.6.5之前的1.6.x版本，1.7.26之前的1.7.x版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-4134
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-4134
Please Login to view more intelligence information
- http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txtx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2013-4134
Same Patch Batch · n/a · 2013-11-05 · 23 CVEs total
| CVE-2013-3264 | WordPress WP Ultimate Email Marketer插件跨站脚本漏洞 | |
| CVE-2013-5688 | AjaXplorer 目录遍历漏洞 | |
| CVE-2013-4135 | IBM OpenAFS 安全绕过漏洞 | |
| CVE-2012-4503 | Chrony 远程拒绝服务漏洞 | |
| CVE-2012-4502 | Chrony 拒绝服务漏洞 | |
| CVE-2013-6618 | Juniper Junos J-Web 任意命令执行漏 | |
| CVE-2013-5695 | Opsview 跨站脚本漏洞 | |
| CVE-2013-5694 | Opsview ‘service_selection’参数SQL注入漏洞 | |
| CVE-2013-4497 | OpenStack Compute 权限许可和访问控制漏洞 | |
| CVE-2013-4453 | LDAP Account Manager ‘current_language’参数跨站脚本漏洞 | |
| CVE-2013-4419 | libguestfs 不安全临时目录创建提权漏洞 | |
| CVE-2011-5267 | WikiWig Xinha编辑器跨站脚本漏洞 | |
| CVE-2013-3263 | WordPress WP Ultimate Email Marketer插件安全绕过漏洞 | |
| CVE-2013-6617 | Salt 安全漏洞 | |
| CVE-2013-6172 | RoundCube Webmail‘_session’参数远程安全漏洞 | |
| CVE-2013-6077 | Citrix XenDesktop ‘BrokerAccessPolicyRule’Policy Rule 远程安全绕过漏洞 | |
| CVE-2013-5670 | Serendipity ‘to_r_list’参数跨站脚本漏洞 | |
| CVE-2013-4439 | SaltStack Salt 安全绕过漏洞 | |
| CVE-2013-4438 | Salt 代码注入漏洞 | |
| CVE-2013-4437 | SaltStack Salt 不安全临时文件处理漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han
V. Comments for CVE-2013-4134
No comments yet