CVE-2013-10006 Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy

A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing discrepancy. The...

PT-2023-9995 · Ziftr · Ziftr Primecoin

Name of the Vulnerable Software and Affected Versions: Ziftr primecoin versions up to 0.8.4rc1 Description: A vulnerability was found in the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing...

Bitcoin bitcoind 'bitcoinrpc.cpp' Cryptographic Information Leaked

Bitcoin is an e-currency created with open source P2P software. A security vulnerability exists in the 'HTTPAuthorized' function in the bitcoinrpc.cpp file in bitcoind version 0.8.1. The vulnerability stems from the fact that the function matches passwords using a byte-by-byte comparison. The...