CVE-2013-4165

2022-10-0316:14:58

redhat

www.cve.org

bitcoind 0.8.1

httpauthorized function

remote attackers

passwords

timing side-channel attack

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%

JSON

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.