Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5v7c-9xxg-p4h3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

EPSS

Процентиль: 36%
0.00153
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
больше 12 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

nvd
больше 12 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

debian
больше 12 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provid ...

EPSS

Процентиль: 36%
0.00153
Низкий

Дефекты

CWE-200