CVE-2012-3884

AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data...

CVE-2012-3884

AirDroid 1.0.4 beta is affected by an authentication flaw where the login data (password hash) is transmitted over HTTP, enabling an attacker on the same wireless network to sniff traffic and replay credentials to gain access. Root cause: direct transmission of a password hash over HTTP without t...