{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-16T00:00:00", "descriptions": [{"lang": "en", "value": "CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-10-17T13:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "15455", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15455"}, {"name": "21244", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21244"}, {"name": "190", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/190"}, {"name": "20051116 Schneier's PasswordSafe password validation flaw", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=113217074200452&w=2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3801", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "15455", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15455"}, {"name": "21244", "refsource": "OSVDB", "url": "http://www.osvdb.org/21244"}, {"name": "190", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/190"}, {"name": "20051116 Schneier's PasswordSafe password validation flaw", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=113217074200452&w=2"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:24:36.353Z"}, "title": "CVE Program Container", "references": [{"name": "15455", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15455"}, {"name": "21244", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21244"}, {"name": "190", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/190"}, {"name": "20051116 Schneier's PasswordSafe password validation flaw", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=113217074200452&w=2"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3801", "datePublished": "2005-11-24T11:00:00", "dateReserved": "2005-11-24T00:00:00", "dateUpdated": "2024-08-07T23:24:36.353Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "4C57891A-6C9F-4AAD-B7BF-07274EFD954C", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.1a:*:*:*:*:*:*:*", "matchCriteriaId": "6EDBEF7D-899B-4E69-9CC8-6BF1DAFBCB81", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "703F94CC-3C4B-4277-8659-411EB8086B99", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2-dk_experimental:*:*:*:*:*:*:*", "matchCriteriaId": "A516722F-CA83-4EBA-A649-FCAB7DD06322", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2a:*:*:*:*:*:*:*", "matchCriteriaId": "4C35C7B7-27FB-4E37-B2F2-7FAF08B33804", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2b:*:*:*:*:*:*:*", "matchCriteriaId": "D4FF8A0D-0F5C-4E91-A2FF-5E00F62D1969", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2b_ppc:*:*:*:*:*:*:*", "matchCriteriaId": "AB5B9726-442B-4CEF-BF11-FAD313CE9C12", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c:*:*:*:*:*:*:*", "matchCriteriaId": "828A6392-CD29-4E1E-B01A-DD23F1E92410", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4671228-6585-49A9-B11B-68708F06EDDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:1.9.2c.2:*:*:*:*:*:*:*", "matchCriteriaId": "282EAC0D-536D-436B-98CE-655C76B725F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "17D7C5ED-0568-4DED-8815-D93CA9D997D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.01:*:*:*:*:*:*:*", "matchCriteriaId": "5FD8DB62-9A77-4182-A2D6-9E3949EA8603", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.02:*:*:*:*:*:*:*", "matchCriteriaId": "FEC5E3DE-46E2-45CB-B811-C976674A7FF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.03:*:*:*:*:*:*:*", "matchCriteriaId": "20362768-75FA-46CE-BABA-FD9D47843AB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.04:*:*:*:*:*:*:*", "matchCriteriaId": "74A79273-33B7-437C-8443-A82BC2380B1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.05:*:*:*:*:*:*:*", "matchCriteriaId": "5DD1E7F2-150B-481D-ACC6-5B4EF746B4A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.06:*:*:*:*:*:*:*", "matchCriteriaId": "BB5A0E88-E94E-4FDE-8D95-CE35527459C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.07:*:*:*:*:*:*:*", "matchCriteriaId": "220ACCC1-E1C8-4A98-9E95-1EC6F3D692B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.08:*:*:*:*:*:*:*", "matchCriteriaId": "ACC5F204-D66C-4563-8FDB-FF504057D69D", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.09:*:*:*:*:*:*:*", "matchCriteriaId": "C629B087-FDE5-4FB4-9533-941CAFA1D244", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.10:*:*:*:*:*:*:*", "matchCriteriaId": "890A2AFE-E3CB-4BCB-96C2-DF2EC6819763", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.11:*:*:*:*:*:*:*", "matchCriteriaId": "316B0240-3E68-4BC6-9E4F-3115A8A73B0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.12:*:*:*:*:*:*:*", "matchCriteriaId": "D6FABCB0-EFA9-4D3C-BE63-0A9C247ADCAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.13:*:*:*:*:*:*:*", "matchCriteriaId": "DB7E941B-3D62-4FC5-8604-F027BA57E4CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:counterpane:passwordsafe:2.14:*:*:*:*:*:*:*", "matchCriteriaId": "B6655E78-5643-45E0-8E09-F2BB0AA748D7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks."}, {"lang": "es", "value": "CounterPane PasswordSafe 1.x y 2.x permite a usuarios locales probar posibles claves de cifrado contra un subconjunto de los datos de claves almacenados sin realizar una funci\u00f3n de derivaci\u00f3n de clave (KDF) m\u00e1s cara, lo que reduce el tiempo de b\u00fasqueda en ataques de fuerza bruta."}], "id": "CVE-2005-3801", "lastModified": "2016-10-18T03:37:23.620", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-24T11:03:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=113217074200452&w=2"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/190"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21244"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15455"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}