CVE-2008-5714

EPSS 0.75%
Veröffentlicht 24.12.2008 18:29:15
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qemu ≫ Qemu Version0.9.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.707

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:C/I:N/A:N

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

http://secunia.com/advisories/33568

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html

http://secunia.com/advisories/34642

http://secunia.com/advisories/35062

http://www.ubuntu.com/usn/usn-776-1

http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html

http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html

http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966

http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966

http://www.securityfocus.com/bid/33020

https://exchange.xforce.ibmcloud.com/vulnerabilities/47683

https://nvd.nist.gov/vuln/detail/CVE-2008-5714

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5714

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5714

EUVD