CVE Vulnerabilities

CVE-2008-5714

Published: Dec 24, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.

Affected Software

Name Vendor Start Version End Version
Qemu Qemu 0.9.1 0.9.1
Kvm Ubuntu gutsy *
Kvm Ubuntu hardy *
Kvm Ubuntu intrepid *
Qemu Ubuntu dapper *
Qemu Ubuntu gutsy *
Qemu Ubuntu hardy *
Qemu Ubuntu intrepid *
Qemu Ubuntu jaunty *
Xen-3.1 Ubuntu hardy *
Xen-3.2 Ubuntu hardy *
Xen-3.3 Ubuntu jaunty *
Xen-3.3 Ubuntu karmic *
Xen-3.3 Ubuntu lucid *
Xen-3.3 Ubuntu maverick *
Xen-3.3 Ubuntu natty *

References