medium4.6
CVE-2005-3801
CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more ex…
Impact
CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Counterpane | Passwordsafe | Versions 1.9.0, 1.9.1a, 1.9.2, 1.9.2-dk_experimental, 1.9.2a, 1.9.2b |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=113217074200452&w=2
- http://securityreason.com/securityalert/190
- http://www.osvdb.org/21244
- http://www.securityfocus.com/bid/15455
- http://marc.info/?l=bugtraq&m=113217074200452&w=2
- http://securityreason.com/securityalert/190
- http://www.osvdb.org/21244
- http://www.securityfocus.com/bid/15455