close Warning: Can't synchronize with repository "(default)" (The repository directory has changed, you should resynchronize the repository with: trac-admin $ENV repository resync '(default)'). Look in the Trac log for more information.

Opened 18 years ago

Closed 18 years ago

Last modified 11 years ago

#150 closed defect (fixed)

Flawed input verification in SRP

Reported by: rainer Owned by: rainer
Priority: critical Milestone: 2.5.4
Component: main Version:
Keywords: Cc:

Description

Thomas Ptacek discovered that the input verification in the SRP implementation is flawed. A malicious client may zero out the computation and connect without valid password.

Change History (1)

comment:1 by rainer, 18 years ago

Resolution: → fixed
Status: new → closed

Fixed in changeset [225].

Note: See TracTickets for help on using tickets.