CVE-2011-1773
First published: Fri May 06 2011(Updated: )
It was found that after virtual machine conversion using virt-v2v the target VM does not have VNC password enabled even though the source VM does. An attacker able to connect to the target VM can possibly use this flaw to operate the VM with privileges of the logged in user.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Matthew Booth Virt-v2v | =0.8.0 | |
| Matthew Booth Virt-v2v | <=0.8.3 | |
| Matthew Booth Virt-v2v | =0.5.3 | |
| Matthew Booth Virt-v2v | =0.2.0 | |
| Matthew Booth Virt-v2v | =0.6.0 | |
| Matthew Booth Virt-v2v | =0.8.1 | |
| Matthew Booth Virt-v2v | =0.7.1 | |
| Matthew Booth Virt-v2v | =0.8.2 | |
| Matthew Booth Virt-v2v | =0.5.2 | |
| Matthew Booth Virt-v2v | =0.6.1 | |
| Matthew Booth Virt-v2v | =0.5.4 | |
| Matthew Booth Virt-v2v | =0.4.0 | |
| Matthew Booth Virt-v2v | =0.7.0 | |
| Matthew Booth Virt-v2v | =0.3.2 | |
| Matthew Booth Virt-v2v | =0.5.1 | |
| Matthew Booth Virt-v2v | =0.4.10 | |
| Matthew Booth Virt-v2v | =0.5.0 | |
| Matthew Booth Virt-v2v | =0.1.0 | |
| Matthew Booth Virt-v2v | =0.6.2 | |
| Matthew Booth Virt-v2v | =0.3.0 | |
| Matthew Booth Virt-v2v | =0.4.9 | |
| Matthew Booth Virt-v2v | =0.6.3 | |
| Redhat Enterprise Linux | =6.0 |
Remedy
https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.osvdb.org/77558
- http://secunia.com/advisories/47086
- http://rhn.redhat.com/errata/RHSA-2011-1615.html
- https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1
- https://bugzilla.redhat.com/show_bug.cgi?id=702754
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=665347
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=665345
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=470410
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=470410&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=705791
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=705792
- https://rhn.redhat.com/errata/RHSA-2011-1615.html
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1773
- agent/tags
- agent/trending
- vendor/matthew booth
- canonical/matthew booth virt-v2v
- version/matthew booth virt-v2v/0.8.0
- version/matthew booth virt-v2v/0.8.3
- version/matthew booth virt-v2v/0.5.3
- version/matthew booth virt-v2v/0.2.0
- version/matthew booth virt-v2v/0.6.0
- version/matthew booth virt-v2v/0.8.1
- version/matthew booth virt-v2v/0.7.1
- version/matthew booth virt-v2v/0.8.2
- version/matthew booth virt-v2v/0.5.2
- version/matthew booth virt-v2v/0.6.1
- version/matthew booth virt-v2v/0.5.4
- version/matthew booth virt-v2v/0.4.0
- version/matthew booth virt-v2v/0.7.0
- version/matthew booth virt-v2v/0.3.2
- version/matthew booth virt-v2v/0.5.1
- version/matthew booth virt-v2v/0.4.10
- version/matthew booth virt-v2v/0.5.0
- version/matthew booth virt-v2v/0.1.0
- version/matthew booth virt-v2v/0.6.2
- version/matthew booth virt-v2v/0.3.0
- version/matthew booth virt-v2v/0.4.9
- version/matthew booth virt-v2v/0.6.3
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0