PT-2013-1387 · Gnome+3 · Vino+3

Robert Townley · Publicado 2013-01-21 · Atualizado 2013-03-19 · CVE-2011-1165

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vino versions prior to 3.2

Description The issue is related to the "Configure network to automatically accept connections" setting. When this setting is enabled, Vino opens ports in UPnP routers, but it does not properly document this behavior. This lack of documentation might make it easier for remote attackers to perform further attacks.

Recommendations For versions prior to 3.2, consider disabling the "Configure network to automatically accept connections" setting to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CESA-2013_0169

CVE-2011-1165

RHSA-2013:0169

RHSA-2013_0169

Produtos afetados

Centos

Debian

Red Hat

Vino

Referências · 28

• 🔥 http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 · Exploit
• https://security-tracker.debian.org/tracker/source-package/vino · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-0904 · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=594521 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2013-0169.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-1165 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2013-January/068681.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1165 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=678846 · Nota
• https://security-tracker.debian.org/tracker/CVE-2011-1165 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2013-January/081368.html · Nota
• https://access.redhat.com/security/cve/CVE-2011-1164 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0905 · Nota
• https://lists.centos.org/pipermail/centos-announce/2013-January/031244.html · Nota