CVE-2013-10006

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.8.4rc2 is able to address this issue. The patch is named cdb3441b5cd2c1bae49fae671dc4a496f7c96322. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217171.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-208 CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Jan 1, 2023
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-100077.5A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file CVE-2013-100089.8A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to CVE-2013-100099.8A vulnerability was found in DrAzraelTod pyChao and classified as critical. Affected by this issue is the function klauen/lesen of the file CVE-2013-10019.3WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me CVE-2013-100106.1A vulnerability classified as problematic has been found in zerochplus. This affects the function PrintResList of the file test/mordor/threa CVE-2013-100119.8A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functi CVE-2013-100129.8A vulnerability, which was classified as critical, was found in antonbolling clan7ups. Affected is an unknown function of the component Logi CVE-2013-100139.8A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects the function authenti CVE-2013-100149.8A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql inj CVE-2013-100159.8A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htd CVE-2013-100169.8A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdoc CVE-2013-100179.8A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/