vino-preferences does not warn about UPnP especially with no password and no confirmation.
Published Mar 12, 2013
5.1
MEDIUMCVSS 2.0
EPSS 2.27%
Description
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
Affected products
No data.
- ≤ 3.1.92
- 0.12
- 0.14
- 2.7
- 2.7.3
- 2.7.3.1
- 2.7.4
- 2.7.4.90
- 2.7.4.91
- 2.7.90
- 2.7.91
- 2.7.92
- 2.8
- 2.8.0
- 2.8.0.1
- 2.8.1
- 2.9
- 2.9.2
- 2.10
- 2.11
- 2.11.1
- 2.11.1.1
- 2.11.1.2
- 2.11.90
- 2.11.92
- 2.12
- 2.13
- 2.13.5
- 2.14
- 2.15
- 2.16
- 2.17
- 2.17.2
- 2.17.4
- 2.17.5
- 2.17.92
- 2.18
- 2.18.1
- 2.19
- 2.19.5
- 2.19.90
- 2.19.92
- 2.20
- 2.20.1
- 2.21
- 2.21.1
- 2.21.2
- 2.21.3
- 2.21.90
- 2.21.91
- 2.21.92
- 2.22
- 2.22.1
- 2.22.2
- 2.23
- 2.23.5
- 2.23.90
- 2.23.91
- 2.23.92
- 2.24
- 2.24.1
- 2.25
- 2.25.3
- 2.25.4
- 2.25.5
- 2.25.90
- 2.25.91
- 2.25.92
- 2.26
- 2.26.1
- 2.26.2
- 2.27
- 2.27.5
- 2.27.90
- 2.27.91
- 2.27.92
- 2.28
- 2.28.1
- 2.28.2
- 2.28.3
- 2.31.4
- 2.31.91
- 2.32.0
- 2.32.1
- 2.32.2
- 2.99.0
- 2.99.1
- 2.99.2
- 2.99.3
- 2.99.4
- 2.99.5
- 3.0.0
- 3.0.1
- 3.0.2
- 3.0.3
- 3.1
- 3.1.1
- 3.1.2
- 3.1.3
- 3.1.4
- 3.1.5
- 3.1.90
- 3.1.91
No data.
Red Hat Enterprise Linux 6
vino-0:2.28.1-8.el6_3
Fixed · RHSA-2013:0169
Red Hat Enterprise Linux 4
vino
Not affected
Red Hat Enterprise Linux 5
vino
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | vino-0:2.28.1-8.el6_3 | Fixed | RHSA-2013:0169 |
| Red Hat Enterprise Linux 4 | vino | Not affected | n/a |
| Red Hat Enterprise Linux 5 | vino | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue did not affect the version of vino as shipped with Red Hat Enterprise Linux 4 or 5 as they did not include support for Universal Plug and Play (UPnP). A future update in Red Hat Enterprise Linux 6 may address this flaw. To mitigate this issue, users should ensure that confirmation is requested on each inbound connection attempt, that a password is required to connect, and that automatic network configuration is disabled. This will prevent vino from using UPnP to allow access to the VNC port, and will ensure that any connections require a password and that the user is notified on any connection attempts.
No CWE recorded.
References (9)
- http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 x_refsource_CONFIRMExploitPatch
- http://rhn.redhat.com/errata/RHSA-2013-0169.html vendor-advisoryx_refsource_REDHAT
- http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2011-1165 Vendor Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=594521 x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=678846 x_refsource_MISCIssue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-1175 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2011-1165
- https://www.cve.org/CVERecord?id=CVE-2011-1165
| Link | Providers | Tags |
|---|---|---|
| http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 | x_refsource_CONFIRMExploitPatch | |
| http://rhn.redhat.com/errata/RHSA-2013-0169.html | vendor-advisoryx_refsource_REDHAT | |
| http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40 | x_refsource_MISC | |
| https://access.redhat.com/security/cve/CVE-2011-1165 | Vendor Advisory | |
| https://bugzilla.gnome.org/show_bug.cgi?id=594521 | x_refsource_CONFIRM | |
| https://bugzilla.redhat.com/show_bug.cgi?id=678846 | x_refsource_MISCIssue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-1175 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2011-1165 | ||
| https://www.cve.org/CVERecord?id=CVE-2011-1165 |
Change history (0)
No recorded changes yet.