QEMU KVM VNC Password Security Bypass Vulnerability

Bugtraq ID:	45743
Class:	Access Validation Error
CVE:	CVE-2011-0011
Remote:	Yes
Local:	No
Published:	Jan 10 2011 12:00AM
Updated:	May 02 2011 09:03AM
Credit:	Petr Matousek
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop 6 QEMU QEMU 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

QEMU KVM VNC Password Security Bypass Vulnerability

QEMU KVM is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.

QEMU KVM VNC Password Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

QEMU KVM VNC Password Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.5+noroms+0ubuntu7.2_armel.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 2.5+noroms+0ubuntu7.2_armel.deb


• Ubuntu qemu-kvm-extras_0.12.5+noroms-0ubuntu7.2_armel.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-kvm-extras_0.12. 5+noroms-0ubuntu7.2_armel.deb


• Ubuntu qemu_0.12.5+noroms-0ubuntu7.2_armel.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.12.5+noroms-0u buntu7.2_armel.deb


• Ubuntu qemu-common_0.12.5+noroms-0ubuntu7.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.5+noroms-0ubuntu7.2_all.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu qemu-kvm-extras_0.11.0-0ubuntu6.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-kvm-extras_0.11. 0-0ubuntu6.4_lpia.deb


• Ubuntu qemu-arm-static_0.11.0-0ubuntu6.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-arm-static_0.11. 0-0ubuntu6.4_lpia.deb


• Ubuntu qemu-kvm_0.11.0-0ubuntu6.4_lpia.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/qemu-kvm_0.11.0-0ubuntu6. 4_lpia.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.11.0+0ubuntu6.4_lpia.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 1.0+0ubuntu6.4_lpia.deb


• Ubuntu qemu_0.11.0-0ubuntu6.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.11.0-0ubuntu6. 4_lpia.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu qemu-kvm-extras-static_0.12.5+noroms-0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras-static_0.12.5+noroms-0ubuntu7.2_amd64.deb


• Ubuntu qemu-kvm_0.12.5+noroms-0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.12.5 +noroms-0ubuntu7.2_amd64.deb


• Ubuntu qemu_0.12.5+noroms-0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.12.5 +noroms-0ubuntu7.2_amd64.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.5+noroms+0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.12.5+noroms+0ubuntu7.2_amd64.deb


• Ubuntu qemu-common_0.12.5+noroms-0ubuntu7.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.5+noroms-0ubuntu7.2_all.deb


• Ubuntu qemu-kvm-extras_0.12.5+noroms-0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.12.5+noroms-0ubuntu7.2_amd64.deb


• Ubuntu qemu-arm-static_0.12.5+noroms-0ubuntu7.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.12.5+noroms-0ubuntu7.2_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.3+noroms+0ubuntu9.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 2.3+noroms+0ubuntu9.4_powerpc.deb


• Ubuntu qemu-kvm_0.12.3+noroms-0ubuntu9.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/qemu-kvm_0.12.3+noroms-0u buntu9.4_powerpc.deb


• Ubuntu qemu-common_0.12.3+noroms-0ubuntu9.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.3+noroms-0ubuntu9.4_all.deb


• Ubuntu qemu-kvm-extras_0.12.3+noroms-0ubuntu9.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-kvm-extras_0.12. 3+noroms-0ubuntu9.4_powerpc.deb


• Ubuntu qemu_0.12.3+noroms-0ubuntu9.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.12.3+noroms-0u buntu9.4_powerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu qemu-arm-static_0.11.0-0ubuntu6.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.11.0-0ubuntu6.4_i386.deb


• Ubuntu qemu-kvm-extras_0.11.0-0ubuntu6.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.11.0-0ubuntu6.4_i386.deb


• Ubuntu qemu_0.11.0-0ubuntu6.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.11.0 -0ubuntu6.4_i386.deb


• Ubuntu qemu-kvm_0.11.0-0ubuntu6.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.11.0 -0ubuntu6.4_i386.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.11.0+0ubuntu6.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.11.0+0ubuntu6.4_i386.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu qemu-kvm-extras_0.12.5+noroms-0ubuntu7.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-kvm-extras_0.12. 5+noroms-0ubuntu7.2_powerpc.deb


• Ubuntu qemu_0.12.5+noroms-0ubuntu7.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.12.5+noroms-0u buntu7.2_powerpc.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.5+noroms+0ubuntu7.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 2.5+noroms+0ubuntu7.2_powerpc.deb


• Ubuntu qemu-kvm_0.12.5+noroms-0ubuntu7.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/qemu-kvm_0.12.5+noroms-0u buntu7.2_powerpc.deb


• Ubuntu qemu-common_0.12.5+noroms-0ubuntu7.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.5+noroms-0ubuntu7.2_all.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu qemu_0.12.3+noroms-0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.12.3 +noroms-0ubuntu9.4_amd64.deb


• Ubuntu qemu-kvm_0.12.3+noroms-0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.12.3 +noroms-0ubuntu9.4_amd64.deb


• Ubuntu qemu-kvm-extras-static_0.12.3+noroms-0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras-static_0.12.3+noroms-0ubuntu9.4_amd64.deb


• Ubuntu qemu-common_0.12.3+noroms-0ubuntu9.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.3+noroms-0ubuntu9.4_all.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.3+noroms+0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.12.3+noroms+0ubuntu9.4_amd64.deb


• Ubuntu qemu-arm-static_0.12.3+noroms-0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.12.3+noroms-0ubuntu9.4_amd64.deb


• Ubuntu qemu-kvm-extras_0.12.3+noroms-0ubuntu9.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.12.3+noroms-0ubuntu9.4_amd64.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu qemu-arm-static_0.11.0-0ubuntu6.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.11.0-0ubuntu6.4_amd64.deb


• Ubuntu qemu-kvm-extras_0.11.0-0ubuntu6.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.11.0-0ubuntu6.4_amd64.deb


• Ubuntu qemu-kvm_0.11.0-0ubuntu6.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.11.0 -0ubuntu6.4_amd64.deb


• Ubuntu qemu_0.11.0-0ubuntu6.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.11.0 -0ubuntu6.4_amd64.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.11.0+0ubuntu6.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.11.0+0ubuntu6.4_amd64.deb

Ubuntu Ubuntu Linux 10.04 ARM

• Ubuntu qemu-common_0.12.3+noroms-0ubuntu9.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.3+noroms-0ubuntu9.4_all.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.3+noroms+0ubuntu9.4_armel.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 2.3+noroms+0ubuntu9.4_armel.deb


• Ubuntu qemu_0.12.3+noroms-0ubuntu9.4_armel.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.12.3+noroms-0u buntu9.4_armel.deb


• Ubuntu qemu-kvm-extras_0.12.3+noroms-0ubuntu9.4_armel.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu-kvm-extras_0.12. 3+noroms-0ubuntu9.4_armel.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.5+noroms+0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.12.5+noroms+0ubuntu7.2_i386.deb


• Ubuntu qemu-common_0.12.5+noroms-0ubuntu7.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.5+noroms-0ubuntu7.2_all.deb


• Ubuntu qemu-kvm-extras-static_0.12.5+noroms-0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras-static_0.12.5+noroms-0ubuntu7.2_i386.deb


• Ubuntu qemu-arm-static_0.12.5+noroms-0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.12.5+noroms-0ubuntu7.2_i386.deb


• Ubuntu qemu-kvm_0.12.5+noroms-0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.12.5 +noroms-0ubuntu7.2_i386.deb


• Ubuntu qemu-kvm-extras_0.12.5+noroms-0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.12.5+noroms-0ubuntu7.2_i386.deb


• Ubuntu qemu_0.12.5+noroms-0ubuntu7.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.12.5 +noroms-0ubuntu7.2_i386.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu qemu-common_0.12.3+noroms-0ubuntu9.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.3+noroms-0ubuntu9.4_all.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.3+noroms+0ubuntu9.4_sparc.deb
  http://ports.ubuntu.com/pool/main/q/qemu-kvm/kvm_84+dfsg-0ubuntu16+0.1 2.3+noroms+0ubuntu9.4_sparc.deb


• Ubuntu qemu_0.12.3+noroms-0ubuntu9.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/q/qemu-kvm/qemu_0.12.3+noroms-0u buntu9.4_sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu qemu-kvm-extras_0.12.3+noroms-0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras_0.12.3+noroms-0ubuntu9.4_i386.deb


• Ubuntu qemu-arm-static_0.12.3+noroms-0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-arm-st atic_0.12.3+noroms-0ubuntu9.4_i386.deb


• Ubuntu qemu-kvm-extras-static_0.12.3+noroms-0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu-kvm-ex tras-static_0.12.3+noroms-0ubuntu9.4_i386.deb


• Ubuntu qemu_0.12.3+noroms-0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/q/qemu-kvm/qemu_0.12.3 +noroms-0ubuntu9.4_i386.deb


• Ubuntu qemu-kvm_0.12.3+noroms-0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-kvm_0.12.3 +noroms-0ubuntu9.4_i386.deb


• Ubuntu qemu-common_0.12.3+noroms-0ubuntu9.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/qemu-common_0.1 2.3+noroms-0ubuntu9.4_all.deb


• Ubuntu kvm_84+dfsg-0ubuntu16+0.12.3+noroms+0ubuntu9.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/q/qemu-kvm/kvm_84+dfsg-0ub untu16+0.12.3+noroms+0ubuntu9.4_i386.deb

QEMU KVM VNC Password Security Bypass Vulnerability

References:

• Bug 668589 - qemu-kvm: Setting VNC password to empty string silently disables al (Red Hat)
  
• Vendor Homepage (QEMU)
  
• qemu-kvm: Setting VNC password to empty string silently disables all authenticat (Zachary Amsden)