PT-2012-2787 · Apple · Remote Desktop

Mark S. C. Smith · Publicado 2012-08-22 · Atualizado 2013-04-02 · CVE-2012-0681

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Remote Desktop versions prior to 3.6.1

Description The issue allows remote attackers to obtain cleartext VNC session content by sniffing the network, due to the failure to recognize the "Encrypt all network data" setting during connections to third-party VNC servers.

Recommendations For Apple Remote Desktop versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-0681

Produtos afetados

Remote Desktop

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-0681 · Nota de Segurança
• http://support.apple.com/kb/HT5433 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2012/Aug/msg00000.html · Aviso do Fabricante
• http://securityfocus.com/bid/55100 · Nota