CVEvulnerability
CVE-2011-1165
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
Affected configurations
• david king vino (<= 3.1.92)
• david king vino 0.12
• david king vino 0.14
• david king vino 2.7
• david king vino 2.7.3
• david king vino 2.7.3.1
• david king vino 2.7.4
• david king vino 2.7.4.90
• david king vino 2.7.4.91
• david king vino 2.7.90
• david king vino 2.7.91
• david king vino 2.7.92
• david king vino 2.8
• david king vino 2.8.0
• david king vino 2.8.0.1
• david king vino 2.8.1
• david king vino 2.9
• david king vino 2.9.2
• david king vino 2.10
• david king vino 2.11
• david king vino 2.11.1
• david king vino 2.11.1.1
• david king vino 2.11.1.2
• david king vino 2.11.90
• david king vino 2.11.92
• david king vino 2.12
• david king vino 2.13
• david king vino 2.13.5
• david king vino 2.14
• david king vino 2.15
• david king vino 2.16
• david king vino 2.17
• david king vino 2.17.2
• david king vino 2.17.4
• david king vino 2.17.5
• david king vino 2.17.92
• david king vino 2.18
• david king vino 2.18.1
• david king vino 2.19
• david king vino 2.19.5
• david king vino 2.19.90
• david king vino 2.19.92
• david king vino 2.20
• david king vino 2.20.1
• david king vino 2.21
• david king vino 2.21.1
• david king vino 2.21.2
• david king vino 2.21.3
• david king vino 2.21.90
• david king vino 2.21.91
• david king vino 2.21.92
• david king vino 2.22
• david king vino 2.22.1
• david king vino 2.22.2
• david king vino 2.23
• david king vino 2.23.5
• david king vino 2.23.90
• david king vino 2.23.91
• david king vino 2.23.92
• david king vino 2.24
… and 43 more
References
- http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 Exploit, Patch
- http://rhn.redhat.com/errata/RHSA-2013-0169.html rhn.redhat.com
- http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40 www.dslreports.com
- https://bugzilla.gnome.org/show_bug.cgi?id=594521 bugzilla.gnome.org
- https://bugzilla.redhat.com/show_bug.cgi?id=678846 bugzilla.redhat.com
- http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 Exploit, Patch
- http://rhn.redhat.com/errata/RHSA-2013-0169.html rhn.redhat.com
- http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40 www.dslreports.com
- https://bugzilla.gnome.org/show_bug.cgi?id=594521 bugzilla.gnome.org
- https://bugzilla.redhat.com/show_bug.cgi?id=678846 bugzilla.redhat.com