PT-2014-2113 · Red Hat · Virt-V2V+1

Published 2011-12-05 · Updated 2019-04-22 · CVE-2011-1773

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions virt-v2v versions prior to 0.8.4

Description The issue allows local users to bypass the intended VNC authentication by connecting without a password, as the VNC console password is not preserved when converting a guest.

Recommendations For versions prior to 0.8.4, update to version 0.8.4 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2011-1773

RHSA-2011:1615

RHSA-2011_1615

Affected Products

Red Hat

Virt-V2V

References · 9

• 🔥 https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1773 · Security Note
• http://rhn.redhat.com/errata/RHSA-2011-1615.html · Vendor Advisory
• http://secunia.com/advisories/47086 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-1615.html · Vendor Advisory
• http://osvdb.org/77558 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=702754 · Note
• https://access.redhat.com/errata/RHSA-2011:1615 · Note
• https://access.redhat.com/security/cve/CVE-2011-1773 · Note