Opened 16 years ago

Closed 16 years ago

Last modified 9 years ago

#150 closed defect (fixed)

Flawed input verification in SRP

Reported by: rainer Owned by: rainer
Priority: critical Milestone: 2.5.4
Component: main Version:
Keywords: Cc:

Description

Thomas Ptacek discovered that the input verification in the SRP implementation is flawed. A malicious client may zero out the computation and connect without valid password.

Change History (1)

comment:1 by rainer, 16 years ago

Resolution: → fixed
Status: new → closed

Fixed in changeset [225].

Note: See TracTickets for help on using tickets.