CVE-2008-2780

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-19 · updated 2026-06-16
Weakness: CWE-310

Description

The Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file.

Affected products

Albinoloverats Anubis Plugin: through 1.2

References

http://secunia.com/advisories/30388
http://www.vupen.com/english/advisories/2008/1663/references
https://albinoloverats.net/index.php?option=com_content&task=view&id=60&Itemid=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/42652
http://secunia.com/advisories/30388
http://www.vupen.com/english/advisories/2008/1663/references
https://albinoloverats.net/index.php?option=com_content&task=view&id=60&Itemid=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/42652

Get alerted when CVE-2008-2780 or the next vulnerability affects your stack