Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability

from [Steven Murdoch] Network Security [Permanent Link]
Subject: Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability
Date: Tue, 20 Nov 2007 17:30:07 +0000 
On Wed, Nov 21, 2007 at 03:48:06AM +1100, XSS Worm XSS Security Information 
Portal wrote:

This also applies to many other blog software


In which case they are not storing their passwords properly. 

What makes the Wordpress scheme vulnerable is that you can attack it
*without* brute forcing the password. Also, because there is no salt,
brute forcing is much easier than it need be. 


and also every system with a password database.


No, it does not apply to systems which use one way hashing correctly,
for example the UNIX password database. This technique has been known
for around 30 years.

The reasoning and history behind these schemes can be found in a paper
by Morris and Thompson, published in 1978:

 http://cm.bell-labs.com/cm/cs/who/dmr/passwd.ps

Steven.

-- 
w: http://www.cl.cam.ac.uk/users/sjm217/

Attachment: pgpIc6BNRA4U6.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability, XSS Worm XSS Security Information Portal
Next by Date:  Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability, Stefan Esser
Previous by Thread:  Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability, XSS Worm XSS Security Information Portal
Next by Thread:  Re: [Full-disclosure] Wordpress Cookie Authentication Vulnerability, Stefan Esser
Indexes:  [Date] [Thread] [Top] [All Lists]