CVE-2008-5714

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.

Link	Resource
http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966
http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html
http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966
http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html
http://secunia.com/advisories/33568
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://www.securityfocus.com/bid/33020
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://secunia.com/advisories/34642
http://www.ubuntu.com/usn/usn-776-1
http://secunia.com/advisories/35062
https://exchange.xforce.ibmcloud.com/vulnerabilities/47683

Configuration 1

cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:*

---

Published : 2008-12-24 06:29

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5714

Mitre link : CVE-2008-5714

No products.

CWE-189