CVE-2011-1773

Опубликовано: 08 фев. 2014

Источник: nvd

CVSS2: 4.4

EPSS Низкий

Описание

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:matthew_booth:virt-v2v:*:*:*:*:*:*:*:*

Версия до 0.8.3 (включая)

cpe:2.3:a:matthew_booth:virt-v2v:0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.3.2:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.4.9:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.4.10:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.6.3:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:matthew_booth:virt-v2v:0.8.2:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00072

Низкий

4.4 Medium

CVSS2

Дефекты

CWE-255

Связанные уязвимости

CVE-2011-1773

redhat

больше 15 лет назад

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

GHSA-pv82-4539-jh36

github

больше 3 лет назад

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

ELSA-2011-1615

oracle-oval

больше 13 лет назад

ELSA-2011-1615: virt-v2v security and bug fix update (LOW)

EPSS

Процентиль: 23%

0.00072

Низкий

4.4 Medium

CVSS2

Дефекты

CWE-255