CVEvulnerability
CVE-2008-5714
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-189
Description
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
Affected configurations
• qemu qemu 0.9.1
Related
Weakness · not in database (1)
References
- http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html lists.gnu.org
- http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html lists.gnu.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33568 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/35062 secunia.com
- http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966 svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966 svn.savannah.gnu.org
- http://www.securityfocus.com/bid/33020 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-776-1 www.ubuntu.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47683 exchange.xforce.ibmcloud.com
- http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html lists.gnu.org
- http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html lists.gnu.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33568 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/35062 secunia.com
- http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966 svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966 svn.savannah.gnu.org
- http://www.securityfocus.com/bid/33020 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-776-1 www.ubuntu.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47683 exchange.xforce.ibmcloud.com