virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.4 | MEDIUM | AV:L/AC:M/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2011-1615.html | secalert@redhat.com | N/A |
| http://secunia.com/advisories/47086 | secalert@redhat.com | Vendor Advisory |
| http://www.osvdb.org/77558 | secalert@redhat.com | N/A |
| https://bugzilla.redhat.com/show_bug.cgi?id=702754 | secalert@redhat.com | N/A |
| https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1 | secalert@redhat.com | Exploit Patch |
| http://rhn.redhat.com/errata/RHSA-2011-1615.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://secunia.com/advisories/47086 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.osvdb.org/77558 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://bugzilla.redhat.com/show_bug.cgi?id=702754 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1 | af854a3a-2127-422b-91ae-364da2661108 | Exploit Patch |