Security Advisory
CVE-2009-4810
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.