Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-4165
HistoryAug 02, 2013 - 12:10 p.m.

Authentication flaw

2013-08-0212:10:00
PRIOn knowledge base
www.prio-n.com
6

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.0%

The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

CPENameOperatorVersion
bitcoin_coreeq0.8.1

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.0%