NVD

Id
20422  
Name
CVE-2016-5008  
Description
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-07-13  
Modified Date
2016-11-28  
Seq
2016-5008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111671 20422 CVE-2016-5008 openSUSE-SU-2016:1809  View
111672 20422 CVE-2016-5008 openSUSE-SU-2016:1810  View
111673 20422 CVE-2016-5008 openSUSE-SU-2016:1975  View
111674 20422 CVE-2016-5008 http://security.libvirt.org/2016/0001.html  View
111675 20422 CVE-2016-5008 DSA-3613  View
111676 20422 CVE-2016-5008 91562  View
111677 20422 CVE-2016-5008 https://bugzilla.redhat.com/show_bug.cgi?id=1180092  View
111678 20422 CVE-2016-5008 FEDORA-2016-65cc608ebe  View
111679 20422 CVE-2016-5008 FEDORA-2016-7b7e16a39e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2990 JVNDB-2016-003763 libvirt における認証を回避される脆弱性 libvirt は、VNC サーバのパスワードが空の文字列に設定されている場合、不適切にパスワードの確認を無効化するため、認証を回避され、VNC セッションを確立される脆弱性が存在します。 CVE-2016-5008 91514 CVE-2016-5008 20422 4.3 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003763.html 2016-06-30 2016-07-20 View