Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Second Life URI处理器敏感信息泄露漏洞
Vulnerability Description
Second Life是一种基于网络的虚拟现实游戏。 Second Life安装的URI处理器实现机制上存在漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页获取用户的敏感信息。 SecondLife注册的secondlife:// URI处理器允许客户端向登录服务器发送发送明文的用户登录账号及口令hash，这样攻击者可以通过网络嗅探工具获得别人的用户账号信息。
CVSS Information
N/A
Vulnerability Type
N/A