CVE

Id
35831  
CVE No.
CVE-2008-5714  
Status
Candidate  
Description
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.  
Phase
Assigned (20081224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
393935 35831 CVE-2008-5714 MLIST:[qemu-devel] 20081123 [PATCH] Fix off-by-one bug limiting VNC passwords to 7 chars  View
393936 35831 CVE-2008-5714 URL:http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html  View
393937 35831 CVE-2008-5714 MLIST:[qemu-devel] 20081210 Re: [RESEND] [PATCH v2] Fix off-by-one bug limiting VNC passwords to 7 chars  View
393938 35831 CVE-2008-5714 URL:http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html  View
393939 35831 CVE-2008-5714 CONFIRM:http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966  View
393940 35831 CVE-2008-5714 CONFIRM:http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966  View
393941 35831 CVE-2008-5714 SUSE:SUSE-SR:2009:002  View
393942 35831 CVE-2008-5714 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html  View
393943 35831 CVE-2008-5714 SUSE:SUSE-SR:2009:008  View
393944 35831 CVE-2008-5714 URL:http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html  View
393945 35831 CVE-2008-5714 UBUNTU:USN-776-1  View
393946 35831 CVE-2008-5714 URL:http://www.ubuntu.com/usn/usn-776-1  View
393947 35831 CVE-2008-5714 BID:33020  View
393948 35831 CVE-2008-5714 URL:http://www.securityfocus.com/bid/33020  View
393949 35831 CVE-2008-5714 SECUNIA:33568  View
393950 35831 CVE-2008-5714 URL:http://secunia.com/advisories/33568  View
393951 35831 CVE-2008-5714 SECUNIA:34642  View
393952 35831 CVE-2008-5714 URL:http://secunia.com/advisories/34642  View
393953 35831 CVE-2008-5714 SECUNIA:35062  View
393954 35831 CVE-2008-5714 URL:http://secunia.com/advisories/35062  View
393955 35831 CVE-2008-5714 XF:qemu-monitor-weak-security(47683)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49890 JVNDB-2008-005200 Netatalk の papd デーモンにおける任意のコマンドを実行される脆弱性 Netatalk の papd デーモンには、print ファイルへの pipe コマンド内で特定の変数を使用している際、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-5718 35831 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005200.html  View