Full Disclosure mailing list archives
Re: Wordpress Cookie Authentication Vulnerability
From: Steven Murdoch <fulldisc+Steven.Murdoch () cl cam ac uk>
Date: Tue, 20 Nov 2007 17:30:07 +0000
On Wed, Nov 21, 2007 at 03:48:06AM +1100, XSS Worm XSS Security Information Portal wrote:
This also applies to many other blog software
In which case they are not storing their passwords properly. What makes the Wordpress scheme vulnerable is that you can attack it *without* brute forcing the password. Also, because there is no salt, brute forcing is much easier than it need be.
and also every system with a password database.
No, it does not apply to systems which use one way hashing correctly, for example the UNIX password database. This technique has been known for around 30 years. The reasoning and history behind these schemes can be found in a paper by Morris and Thompson, published in 1978: http://cm.bell-labs.com/cm/cs/who/dmr/passwd.ps Steven. -- w: http://www.cl.cam.ac.uk/users/sjm217/
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 19)
- Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Murdoch (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Stefan Esser (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 20)
- <Possible follow-ups>
- Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability James Matthews (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Eduardo Tongson (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Valdis . Kletnieks (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Paul Schmehl (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Adrian P (Nov 21)