4.3

CVE-2011-0011

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Updaterc2 Version <= 0.11.0
Qemu ≫ Qemu Version0.1.0
Qemu ≫ Qemu Version0.1.1
Qemu ≫ Qemu Version0.1.2
Qemu ≫ Qemu Version0.1.3
Qemu ≫ Qemu Version0.1.4
Qemu ≫ Qemu Version0.1.5
Qemu ≫ Qemu Version0.1.6
Qemu ≫ Qemu Version0.10.0
Qemu ≫ Qemu Version0.10.1
Qemu ≫ Qemu Version0.10.2
Qemu ≫ Qemu Version0.10.3
Qemu ≫ Qemu Version0.10.4
Qemu ≫ Qemu Version0.10.5
Qemu ≫ Qemu Version0.10.6
Qemu ≫ Qemu Version0.11.0 Updaterc0
Qemu ≫ Qemu Version0.11.0 Updaterc1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.668
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 3.2 6.4
AV:A/AC:H/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://rhn.redhat.com/errata/RHSA-2011-0345.html
http://secunia.com/advisories/42830
Vendor Advisory
http://secunia.com/advisories/43272
Vendor Advisory
http://secunia.com/advisories/43733
Vendor Advisory
http://secunia.com/advisories/44393
Vendor Advisory
http://ubuntu.com/usn/usn-1063-1
http://www.openwall.com/lists/oss-security/2011/01/10/3
http://www.openwall.com/lists/oss-security/2011/01/11/1
http://www.openwall.com/lists/oss-security/2011/01/12/2
http://www.osvdb.org/70992
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/697197
https://exchange.xforce.ibmcloud.com/vulnerabilities/65215