cbcvebase.
CVE-2011-1773
published 2014-02-08

CVE-2011-1773: virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by…

PriorityP418medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.47%
38.0th percentile
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.

Affected

23 ranges
VendorProductVersion rangeFixed in
matthew_boothvirt-v2v<= 0.8.3—
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
matthew_boothvirt-v2v——
redhatenterprise_linux——

CVSS provenance

nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.