CVE-2009-4810

2010-04-2314:00:00

mitre

www.cve.org

cve-2009-4810

authentication bypass

remote attackers

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.

References

secunia.com/advisories/34104

trac.la-samhna.de/samhain/changeset/225

trac.la-samhna.de/samhain/ticket/150

www.securityfocus.com/bid/34003