Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samhain SRP认证绕过漏洞
Vulnerability Description
samhain既是一个基于主机的入侵检测系统,也是一个文件完整性的监视程序,它由samhain lab(la-samhna.de)的rainer wichmann负责开发和维护。 Samhain的Secure Remote Password(SRP)不按照协议检查零值,远程攻击者可通过特制的输入躲避认证。
CVSS Information
N/A
Vulnerability Type
N/A