CVE-2005-3801: Counterpane Passwordsafe

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute force attacks.

Affected products

• Counterpane Passwordsafe: version 1.9.0 only; version 1.9.1a only; version 1.9.2 only; version 1.9.2-dk_experimental only; version 1.9.2a only; version 1.9.2b only; …

Published 2005-11-24. Last modified 2026-06-16.