NVD

Id
10876  
Name
CVE-2011-4447  
Description
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-08-06  
Modified Date
2012-08-07  
Seq
2011-4447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60910 10876 CVE-2011-4447 http://bitcoin.org/releases/2011/11/21/v0.5.0.html  View
60911 10876 CVE-2011-4447 https://bitcointalk.org/index.php?topic=51474.0  View
60912 10876 CVE-2011-4447 https://bitcointalk.org/index.php?topic=51604.0  View
60913 10876 CVE-2011-4447 https://en.bitcoin.it/wiki/CVEs  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34868 JVNDB-2011-005110 wxBitcoin および bitcoind における暗号化されていない秘密鍵を取得される脆弱性 wxBitcoin および bitcoind の "encrypt wallet" 機能は、BSDDB の削除機能と適切にやり取りを行わないため、ビットコインウォレットファイルから暗号化されていない秘密鍵を取得される脆弱性が存在します。 CVE-2011-4447 52354 CVE-2011-4447 10876 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005110.html 2011-11-11 2012-08-09 View