CVE-2011-4447
published 2012-08-06CVE-2011-4447: The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.63%
73.2th percentile
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bitcoin | bitcoin_core | — | — |
| bitcoin | bitcoin_core | — | — |
| bitcoin | bitcoin_core | — | — |
| bitcoin | wxbitcoin | — | — |
| bitcoin | wxbitcoin | — | — |
| bitcoin | wxbitcoin | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
http://bitcoin.org/releases/2011/11/21/v0.5.0.htmlhttps://bitcointalk.org/index.php?topic=51474.0https://bitcointalk.org/index.php?topic=51604.0https://en.bitcoin.it/wiki/CVEshttp://bitcoin.org/releases/2011/11/21/v0.5.0.htmlhttps://bitcointalk.org/index.php?topic=51474.0https://bitcointalk.org/index.php?topic=51604.0https://en.bitcoin.it/wiki/CVEs
2012-08-06
Published