CVE-2005-3801

Published Nov 24, 2005

Last updated 8 years ago

Overview

Description: CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C57891A-6C9F-4AAD-B7BF-07274EFD954C"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.1a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6EDBEF7D-899B-4E69-9CC8-6BF1DAFBCB81"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "703F94CC-3C4B-4277-8659-411EB8086B99"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2-dk_experimental:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A516722F-CA83-4EBA-A649-FCAB7DD06322"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C35C7B7-27FB-4E37-B2F2-7FAF08B33804"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2b:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D4FF8A0D-0F5C-4E91-A2FF-5E00F62D1969"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2b_ppc:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AB5B9726-442B-4CEF-BF11-FAD313CE9C12"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "828A6392-CD29-4E1E-B01A-DD23F1E92410"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4671228-6585-49A9-B11B-68708F06EDDC"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "282EAC0D-536D-436B-98CE-655C76B725F6"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17D7C5ED-0568-4DED-8815-D93CA9D997D7"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5FD8DB62-9A77-4182-A2D6-9E3949EA8603"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.02:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FEC5E3DE-46E2-45CB-B811-C976674A7FF9"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.03:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20362768-75FA-46CE-BABA-FD9D47843AB5"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.04:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74A79273-33B7-437C-8443-A82BC2380B1F"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.05:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5DD1E7F2-150B-481D-ACC6-5B4EF746B4A5"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.06:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BB5A0E88-E94E-4FDE-8D95-CE35527459C6"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.07:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "220ACCC1-E1C8-4A98-9E95-1EC6F3D692B1"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.08:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ACC5F204-D66C-4563-8FDB-FF504057D69D"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.09:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C629B087-FDE5-4FB4-9533-941CAFA1D244"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "890A2AFE-E3CB-4BCB-96C2-DF2EC6819763"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "316B0240-3E68-4BC6-9E4F-3115A8A73B0A"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6FABCB0-EFA9-4D3C-BE63-0A9C247ADCAC"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB7E941B-3D62-4FC5-8604-F027BA57E4CF"
          },
          {
            "criteria": "cpe:2.3:a:counterpane:passwordsafe:2.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6655E78-5643-45E0-8E09-F2BB0AA748D7"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References