high7.5
CVE-2009-4810
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows re…
Impact
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samhain Labs | Samhain | through 2.5.3 Versions 1.8.9, 1.8.10, 1.8.11, 1.8.12, 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34104
- http://trac.la-samhna.de/samhain/changeset/225
- http://trac.la-samhna.de/samhain/ticket/150
- http://www.securityfocus.com/bid/34003
- http://secunia.com/advisories/34104
- http://trac.la-samhna.de/samhain/changeset/225
- http://trac.la-samhna.de/samhain/ticket/150
- http://www.securityfocus.com/bid/34003