CVE-2009-4810

The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...

CVE-2009-4810

The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...

CVE-2009-4810

The CVE-2009-4810 entry concerns the SRP implementation in Samhain prior to version 2.5.4. A zero-value check required by the SRP protocol is omitted, allowing remote attackers to bypass authentication via crafted input. The impact is an authentication bypass affecting Samhain’s SRP authenticatio...