Grayleonard

**Name of the Vulnerable Software and Affected Versions** bitcoind version 0.8.1 **Description** The issue allows remote attackers to determine passwords via a timing side-channel attack. This is due to the HTTPAuthorized function in bitcoinrpc.cpp providing information about authentication failure upon detecting the first incorrect byte of a password. **Recommendations** For bitcoind version 0.8.1, consider disabling the `HTTPAuthorized` function as a temporary workaround until a patch is available. Restrict access to the bitcoinrpc.cpp module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.