Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-4165HistoryAug 02, 2013 - 12:10 p.m.
CVE-2013-4165
2013-08-0212:10:00
Debian Security Bug Tracker
security-tracker.debian.org
5
0.002 Low
EPSS
Percentile
65.0%
The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | bitcoin | < 0.8.4-1 | bitcoin_0.8.4-1_all.deb |
Related
cve
cve
CVE-2013-4165
2022-10-03 16:14:58
nvd
nvd
CVE-2013-4165
2013-08-02 12:10:40
ubuntucve
ubuntucve
CVE-2013-4165
2013-08-02 00:00:00
cvelist
cvelist
CVE-2013-4165
2022-10-03 16:14:58
prion
prion
Authentication flaw
2013-08-02 12:10:00
threatpost
threatpost
Update to Bitcoin Client Fixes DoS Bug, Password Strength
2013-09-04 15:50:24