{
  "modified": "2025-08-09T19:01:27Z",
  "published": "2008-12-24T18:29:15Z",
  "id": "CVE-2008-5714",
  "details": "Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/33568"
    },
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/34642"
    },
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/35062"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.ubuntu.com/usn/usn-776-1"
    },
    {
      "type": "WEB",
      "url": "http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html"
    },
    {
      "type": "WEB",
      "url": "http://svn.savannah.gnu.org/viewvc/?view=rev\u0026root=qemu\u0026revision=5966"
    },
    {
      "type": "WEB",
      "url": "http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu\u0026r1=5966\u0026r2=5965\u0026pathrev=5966"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/33020"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47683"
    }
  ]
}