CVE:CVE-2011-4447
CNNVD:CNNVD-201208-010
Bitcoin wxBitcoin和bitcoind 0.4.1之前的0.4.x版本和0.5.0rc版本中的‘加密钱包’功能中存在漏洞，该漏洞源于与BSDDB的删除功能未正确交互。依赖于上下文的攻击者可利用该漏洞绕过BSDDB界面并读取有已删除标记的条目，进而从Bitcoin钱包文件中获取非加密的私钥。
solution:Upgrade bitcoin bitcoin_core to a higher version than 0.4.0,0.4.1:rc6,0.5.0:rc,and avoid the version 0.4.0,0.4.1:rc6,0.5.0:rc; Upgrade bitcoin wxbitcoin to a higher version than 0.4.0,0.4.1:rc6,0.5.0:rc,and avoid the version 0.4.0,0.4.1:rc6,0.5.0:rc