VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 18, 2007· Updated Jun 16, 2026

CVE-2007-4961

CVE-2007-4961

Description

The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Linden Lab/Second Life2 versions
    cpe:2.3:a:lindenlab:second_life:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:lindenlab:second_life:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.