PT-2005-4552 · Counterpane · Passwordsafe

Publicado 2005-11-24 · Atualizado 2016-10-18 · CVE-2005-3801

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CounterPane PasswordSafe versions 1.x through 2.x

Description The issue allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF), which reduces the search time in brute force attacks.

Recommendations For CounterPane PasswordSafe versions 1.x through 2.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3801

Produtos afetados

Passwordsafe

Referências · 5

• http://marc.info/?l=bugtraq&m=113217074200452&w=2 · Nota
• http://securityreason.com/securityalert/190 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3801 · Nota de Segurança
• http://osvdb.org/21244 · Nota
• http://securityfocus.com/bid/15455 · Nota