SecuritySpace - CVE-2014-3945

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-3945

Description: The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash.

Test IDs: 1.3.6.1.4.1.25623.1.0.804467

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-3945
Debian Security Information: DSA-2942 (Google Search)
http://www.debian.org/security/2014/dsa-2942
http://www.openwall.com/lists/oss-security/2014/06/03/2

CVE ID:	CVE-2014-3945
Description:	The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash.
Test IDs:	1.3.6.1.4.1.25623.1.0.804467
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3945 Debian Security Information: DSA-2942 (Google Search) http://www.debian.org/security/2014/dsa-2942 http://www.openwall.com/lists/oss-security/2014/06/03/2