CVE-2010-3074

CVE-2010-3074 describes an improper cryptographic combination in EncFS before version 1.7.0, specifically in SSL_Cipher.cpp, where an AES cipher was incorrectly paired with CBC mode for encrypted filesystems. This flaw allows local attackers to potentially extract sensitive information through a watermark attack. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), it indicates low severity, requiring local access with low attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.