Description (CNA)
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html
- http://secunia.com/advisories/35062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47683
- http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html
- http://secunia.com/advisories/34642
- http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966
- http://www.securityfocus.com/bid/33020
- http://www.ubuntu.com/usn/usn-776-1
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
- http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966
ADP enrichment
No English description supplied.
- http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html
- http://secunia.com/advisories/35062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47683
- http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html
- http://secunia.com/advisories/34642
- http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966
- http://www.securityfocus.com/bid/33020
- http://www.ubuntu.com/usn/usn-776-1
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
- http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966