info
discussion
exploit
solution
references
PHP Soap Engine Make_HTTP_Soap_Request Weak Nonce HTTP Authentication Weakness
An attacker can exploit this issue by using brute-force techniques to guess the value of the nonce.
Privacy Statement
Copyright 2010, SecurityFocus