PT-2013-1387 · Gnome+3 · Vino+3

Robert Townley · Published 2013-01-21 · Updated 2013-03-19 · CVE-2011-1165

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vino versions prior to 3.2

Description The issue is related to the "Configure network to automatically accept connections" setting. When this setting is enabled, Vino opens ports in UPnP routers, but it does not properly document this behavior. This lack of documentation might make it easier for remote attackers to perform further attacks.

Recommendations For versions prior to 3.2, consider disabling the "Configure network to automatically accept connections" setting to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CESA-2013_0169

CVE-2011-1165

RHSA-2013:0169

RHSA-2013_0169

Affected Products

Centos

Debian

Red Hat

Vino

References · 28

• 🔥 http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 · Exploit
• https://security-tracker.debian.org/tracker/source-package/vino · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0169.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1165 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1165 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-1165 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-0169.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1164 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0904 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1165 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1165 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4429 · Security Note
• https://access.redhat.com/security/cve/CVE-2011-0904 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=594521 · Note