CVE ID:	CVE-2008-5714
Description:	Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
Test IDs:	1.3.6.1.4.1.25623.1.0.66053
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5714 BugTraq ID: 33020 http://www.securityfocus.com/bid/33020 http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html http://secunia.com/advisories/33568 http://secunia.com/advisories/34642 http://secunia.com/advisories/35062 SuSE Security Announcement: SUSE-SR:2009:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html http://www.ubuntu.com/usn/usn-776-1 XForce ISS Database: qemu-monitor-weak-security(47683) https://exchange.xforce.ibmcloud.com/vulnerabilities/47683