The vos command in OpenAFS 1.6.x before 1.6.5 when using the -encrypt option only enables integrity protection and sends data in cleartext which allows remote attackers to obtain sensitive information by sniffing the network.