Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5v7c-9xxg-p4h3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

EPSS

Процентиль: 82%
0.02278
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
около 13 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

nvd
около 13 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

debian
около 13 лет назад

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provid ...

EPSS

Процентиль: 82%
0.02278
Низкий

Дефекты

CWE-200