Lucene search

RedhatCVE-2011-1773

HistoryFeb 08, 2014 - 12:55 a.m.

CVE-2011-1773

2014-02-0800:55:05

CWE-255

redhat

web.nvd.nist.gov

cve-2011-1773

virt-v2v

vnc console

authentication

local users

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

Affected configurations

Nvd

Node

matthew_boothvirt-v2vRange≤0.8.3

matthew_boothvirt-v2vMatch0.1.0

matthew_boothvirt-v2vMatch0.2.0

matthew_boothvirt-v2vMatch0.3.0

matthew_boothvirt-v2vMatch0.3.2

matthew_boothvirt-v2vMatch0.4.0

matthew_boothvirt-v2vMatch0.4.9

matthew_boothvirt-v2vMatch0.4.10

matthew_boothvirt-v2vMatch0.5.0

matthew_boothvirt-v2vMatch0.5.1

matthew_boothvirt-v2vMatch0.5.2

matthew_boothvirt-v2vMatch0.5.3

matthew_boothvirt-v2vMatch0.5.4

matthew_boothvirt-v2vMatch0.6.0

matthew_boothvirt-v2vMatch0.6.1

matthew_boothvirt-v2vMatch0.6.2

matthew_boothvirt-v2vMatch0.6.3

matthew_boothvirt-v2vMatch0.7.0

matthew_boothvirt-v2vMatch0.7.1

matthew_boothvirt-v2vMatch0.8.0

matthew_boothvirt-v2vMatch0.8.1

matthew_boothvirt-v2vMatch0.8.2

Node

redhatenterprise_linuxMatch6.0

VendorProductVersionCPE
matthew_boothvirt-v2v*cpe:2.3:a:matthew_booth:virt-v2v:*:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.1.0cpe:2.3:a:matthew_booth:virt-v2v:0.1.0:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.2.0cpe:2.3:a:matthew_booth:virt-v2v:0.2.0:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.3.0cpe:2.3:a:matthew_booth:virt-v2v:0.3.0:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.3.2cpe:2.3:a:matthew_booth:virt-v2v:0.3.2:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.4.0cpe:2.3:a:matthew_booth:virt-v2v:0.4.0:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.4.9cpe:2.3:a:matthew_booth:virt-v2v:0.4.9:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.4.10cpe:2.3:a:matthew_booth:virt-v2v:0.4.10:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.5.0cpe:2.3:a:matthew_booth:virt-v2v:0.5.0:*:*:*:*:*:*:*
matthew_boothvirt-v2v0.5.1cpe:2.3:a:matthew_booth:virt-v2v:0.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
matthew_booth	virt-v2v	*	cpe:2.3:a:matthew_booth:virt-v2v::::::::
matthew_booth	virt-v2v	0.1.0	cpe:2.3:a:matthew_booth:virt-v2v:0.1.0:::::::*
matthew_booth	virt-v2v	0.2.0	cpe:2.3:a:matthew_booth:virt-v2v:0.2.0:::::::*
matthew_booth	virt-v2v	0.3.0	cpe:2.3:a:matthew_booth:virt-v2v:0.3.0:::::::*
matthew_booth	virt-v2v	0.3.2	cpe:2.3:a:matthew_booth:virt-v2v:0.3.2:::::::*
matthew_booth	virt-v2v	0.4.0	cpe:2.3:a:matthew_booth:virt-v2v:0.4.0:::::::*
matthew_booth	virt-v2v	0.4.9	cpe:2.3:a:matthew_booth:virt-v2v:0.4.9:::::::*
matthew_booth	virt-v2v	0.4.10	cpe:2.3:a:matthew_booth:virt-v2v:0.4.10:::::::*
matthew_booth	virt-v2v	0.5.0	cpe:2.3:a:matthew_booth:virt-v2v:0.5.0:::::::*
matthew_booth	virt-v2v	0.5.1	cpe:2.3:a:matthew_booth:virt-v2v:0.5.1:::::::*