PT-2014-2113 · Red Hat · Virt-V2V+1

Publicado 2011-12-05 · Atualizado 2019-04-22 · CVE-2011-1773

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions virt-v2v versions prior to 0.8.4

Description The issue allows local users to bypass the intended VNC authentication by connecting without a password, as the VNC console password is not preserved when converting a guest.

Recommendations For versions prior to 0.8.4, update to version 0.8.4 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2011-1773

RHSA-2011:1615

RHSA-2011_1615

Produtos afetados

Red Hat

Virt-V2V

Referências · 9

• 🔥 https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1773 · Nota de Segurança
• http://osvdb.org/77558 · Nota
• http://rhn.redhat.com/errata/RHSA-2011-1615.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=702754 · Nota
• http://secunia.com/advisories/47086 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2011-1615.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:1615 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1773 · Nota