CVE-2011-1773

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

Published: Feb 8, 2014
Updated: Apr 13, 2023
CVE: CVE-2011-1773
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.4
AV:L/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-255

Affected Software
References

Software	From	Fixed in
matthew_booth / virt-v2v	0.8.0	0.8.0.x
matthew_booth / virt-v2v	-	0.8.3.x
matthew_booth / virt-v2v	0.5.3	0.5.3.x
matthew_booth / virt-v2v	0.2.0	0.2.0.x
matthew_booth / virt-v2v	0.6.0	0.6.0.x
matthew_booth / virt-v2v	0.8.1	0.8.1.x
matthew_booth / virt-v2v	0.7.1	0.7.1.x
matthew_booth / virt-v2v	0.8.2	0.8.2.x
matthew_booth / virt-v2v	0.5.2	0.5.2.x
matthew_booth / virt-v2v	0.6.1	0.6.1.x
matthew_booth / virt-v2v	0.5.4	0.5.4.x
matthew_booth / virt-v2v	0.4.0	0.4.0.x
matthew_booth / virt-v2v	0.7.0	0.7.0.x
matthew_booth / virt-v2v	0.3.2	0.3.2.x
matthew_booth / virt-v2v	0.5.1	0.5.1.x
matthew_booth / virt-v2v	0.4.10	0.4.10.x
matthew_booth / virt-v2v	0.5.0	0.5.0.x
matthew_booth / virt-v2v	0.1.0	0.1.0.x
matthew_booth / virt-v2v	0.6.2	0.6.2.x
matthew_booth / virt-v2v	0.3.0	0.3.0.x
matthew_booth / virt-v2v	0.4.9	0.4.9.x
matthew_booth / virt-v2v	0.6.3	0.6.3.x
redhat / enterprise_linux	6.0	6.0.x

Vulnerability Database

289,689

CVE-2011-1773