← Database

CVE-2009-4810

HIGH CVSS: 7.5 Published: 2010-04-23 Modified: 2026-06-16

Description

The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.

Affected Platforms

Samhain Labs Samhain

Weakness Type

CWE-20

References