CVE-2009-4810 Auth bypass in n/a
Remote attackers can bypass authentication in Samhain by exploiting a flaw in the Secure Remote Password implementation that fails to check for zero values.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-4810?
CVE-2009-4810 is a high-severity authentication bypass vulnerability in n/a, published on 23 Apr 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.
Weakness: CWE-20
Which versions are affected by CVE-2009-4810?
It affects 1 product.
Products include Samhain Labs Samhain.
How do I fix CVE-2009-4810?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2009-4810 being exploited?
There is no known exploitation of CVE-2009-4810 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2009-4810, GHSA-jpvc-jx2p-m7rr.