|
CVE Reference: CVE-2007-4961
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2007-4961
|
|
Description:
The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.
|
|
CVE Status:
Candidate
|
|
References:
OSVDB
45947
MISC
http://www.gnucitizen.org/blog/ie-pwns-secondlife
|
|
|
Return to the previous page.
|
