← Back

CVE-2009-4810

nvd nist
Published: Apr 23, 2010Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.

Affected (72)

1 product
Samhain
Configuration A
72 vulnerable
Vulnerable SoftwareAffected Versions
Samhain Labs
Up to 2.5.3
Version 1.8.10
Version 1.8.10 a
Version 1.8.10 b
Version 1.8.11
Version 1.8.12
Version 1.8.12 a
Version 1.8.12 b
Version 1.8.9
Version 2.0.0
Version 2.0.10
Version 2.0.10 a
Version 2.0.1
Version 2.0.2
Version 2.0.2 a
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.5 a
Version 2.0.5 b
Version 2.0.6
Version 2.0.7
Version 2.0.7 a
Version 2.0.7 b
Version 2.0.7 c
Version 2.0.7 d
Version 2.0.7 e
Version 2.0.8
Version 2.0.9
Version 2.1.0
Version 2.1.1
Version 2.1.1 a
Version 2.1.2
Version 2.1.3
Version 2.2.0
Version 2.2.1
Version 2.2.1 a
Version 2.2.1 b
Version 2.2.1 c
Version 2.2.2
Version 2.2.3
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.3.0
Version 2.3.0 a
Version 2.3.1
Version 2.3.1 a
Version 2.3.2
Version 2.3.3
Version 2.3.4
Version 2.3.5
Version 2.3.6
Version 2.3.7
Version 2.3.8
Version 2.4.0
Version 2.4.0 a
Version 2.4.1
Version 2.4.1 a
Version 2.4.2
Version 2.4.3
Version 2.4.4
Version 2.4.5
Version 2.4.5 a
Version 2.4.6
Version 2.4.6 a
Version 2.5.0
Version 2.5.1
Version 2.5.2
Version 2.5.2 a
Version 2.5.2 b
Version 2.6.4

References (8)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.