NVD

Id
7150  
Name
CVE-2011-0011  
Description
qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-06-21  
Modified Date
2012-06-21  
Seq
2011-0011  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40014 7150 CVE-2011-0011 RHSA-2011:0345  View
40015 7150 CVE-2011-0011 USN-1063-1  View
40016 7150 CVE-2011-0011 [oss-security] 20110110 CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication  View
40017 7150 CVE-2011-0011 [oss-security] 20110110 Re: CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication  View
40018 7150 CVE-2011-0011 [oss-security] 20110112 Re: CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication  View
40019 7150 CVE-2011-0011 qemu-vnc-security-bypass(65215)  View
40020 7150 CVE-2011-0011 https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/697197  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27109 JVNDB-2012-002816 qemu-kvm における認証を回避される脆弱性 qemu-kvm は、パスワードが消去された場合、VNC 認証が無効となるため、認証を回避され、VNC セッションを確立される脆弱性が存在します。 CVE-2011-0011 47918 CVE-2011-0011 7150 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002816.html 2012-06-21 2012-06-22 View