Lucene search
HistoryFeb 08, 2014 - 12:55 a.m.
CVE-2011-1773
cve-2011-1773
virt-v2v
vnc console
authentication
local users
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.
Affected configurations
Node
matthew_boothvirt-v2vRange≤0.8.3
ORmatthew_boothvirt-v2vMatch0.1.0
ORmatthew_boothvirt-v2vMatch0.2.0
ORmatthew_boothvirt-v2vMatch0.3.0
ORmatthew_boothvirt-v2vMatch0.3.2
ORmatthew_boothvirt-v2vMatch0.4.0
ORmatthew_boothvirt-v2vMatch0.4.9
ORmatthew_boothvirt-v2vMatch0.4.10
ORmatthew_boothvirt-v2vMatch0.5.0
ORmatthew_boothvirt-v2vMatch0.5.1
ORmatthew_boothvirt-v2vMatch0.5.2
ORmatthew_boothvirt-v2vMatch0.5.3
ORmatthew_boothvirt-v2vMatch0.5.4
ORmatthew_boothvirt-v2vMatch0.6.0
ORmatthew_boothvirt-v2vMatch0.6.1
ORmatthew_boothvirt-v2vMatch0.6.2
ORmatthew_boothvirt-v2vMatch0.6.3
ORmatthew_boothvirt-v2vMatch0.7.0
ORmatthew_boothvirt-v2vMatch0.7.1
ORmatthew_boothvirt-v2vMatch0.8.0
ORmatthew_boothvirt-v2vMatch0.8.1
ORmatthew_boothvirt-v2vMatch0.8.2
Node
redhatenterprise_linuxMatch6.0
Related
nessus
nessus
Scientific Linux Security Update : virt-v2v on SL6.x x86_64
2012-08-01 00:00:00
RHEL 6 : virt-v2v (RHSA-2011:1615)
2013-01-24 00:00:00
Oracle Linux 6 : virt-v2v (ELSA-2011-1615)
2023-09-07 00:00:00
nvd
nvd
CVE-2011-1773
2014-02-08 00:55:05
openvas
openvas
Oracle: Security Advisory (ELSA-2011-1615)
2015-10-06 00:00:00
RedHat Update for virt-v2v RHSA-2011:1615-03
2012-07-09 00:00:00
RedHat Update for virt-v2v RHSA-2011:1615-03
2012-07-09 00:00:00
cvelist
cvelist
CVE-2011-1773
2014-02-08 00:00:00
oraclelinux
oraclelinux
virt-v2v security and bug fix update
2011-12-14 00:00:00
veracode
veracode
Authorization Bypass
2020-04-10 01:06:52
prion
prion
Authentication flaw
2014-02-08 00:55:00
redhat
redhat
(RHSA-2011:1615) Low: virt-v2v security and bug fix update
2011-12-06 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2011-1773