cbcvebase.
CVE-2013-4165
published 2013-08-02

CVE-2013-4165: The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a…

PriorityP424medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
2.28%
80.9th percentile
The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.

Affected

1 ranges
VendorProductVersion rangeFixed in
bitcoinbitcoin_core——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.