Design/Logic Flaw

A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing discrepancy. The...

CVE-2013-10006

Affected software: Ziftr primecoin up to 0.8.4rc1. The issue is in HTTPAuthorized in src/bitcoinrpc.cpp, where manipulation of the arguments strUserPass/strRPCUserColonPass leads to observable timing discrepancies. Exploitation complexity is described as high and exploitation appears difficult. R...