CVE-2011-1165 Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easie...
MediumCVSS 5.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/vino(Debian:12) | All versions | No fix listed |
| debian/vino(Debian:12) | = 3.22.0-6 | No fix listed |
| debian/vino(Debian:12) | = 3.22.0-7 | No fix listed |
| david king vino | <= 3.1.92 | No fix listed |
| david king vino | = 0.12 | No fix listed |
| david king vino | = 0.14 | No fix listed |
| david king vino | = 2.7 | No fix listed |
| david king vino | = 2.7.3 | No fix listed |
| david king vino | = 2.7.3.1 | No fix listed |
| david king vino | = 2.7.4 | No fix listed |
| david king vino | = 2.7.4.90 | No fix listed |
| david king vino | = 2.7.4.91 | No fix listed |
| david king vino | = 2.7.90 | No fix listed |
| david king vino | = 2.7.91 | No fix listed |
| david king vino | = 2.7.92 | No fix listed |
| david king vino | = 2.8 | No fix listed |
| david king vino | = 2.8.0 | No fix listed |
| david king vino | = 2.8.0.1 | No fix listed |
| david king vino | = 2.8.1 | No fix listed |
| david king vino | = 2.9 | No fix listed |
| david king vino | = 2.9.2 | No fix listed |
| david king vino | = 2.10 | No fix listed |
| david king vino | = 2.11 | No fix listed |
| david king vino | = 2.11.1 | No fix listed |
| david king vino | = 2.11.1.1 | No fix listed |
Show 81 more
| Product | Affected versions | Fixed in |
|---|---|---|
| david king vino | = 2.11.1.2 | No fix listed |
| david king vino | = 2.11.90 | No fix listed |
| david king vino | = 2.11.92 | No fix listed |
| david king vino | = 2.12 | No fix listed |
| david king vino | = 2.13 | No fix listed |
| david king vino | = 2.13.5 | No fix listed |
| david king vino | = 2.14 | No fix listed |
| david king vino | = 2.15 | No fix listed |
| david king vino | = 2.16 | No fix listed |
| david king vino | = 2.17 | No fix listed |
| david king vino | = 2.17.2 | No fix listed |
| david king vino | = 2.17.4 | No fix listed |
| david king vino | = 2.17.5 | No fix listed |
| david king vino | = 2.17.92 | No fix listed |
| david king vino | = 2.18 | No fix listed |
| david king vino | = 2.18.1 | No fix listed |
| david king vino | = 2.19 | No fix listed |
| david king vino | = 2.19.5 | No fix listed |
| david king vino | = 2.19.90 | No fix listed |
| david king vino | = 2.19.92 | No fix listed |
| david king vino | = 2.20 | No fix listed |
| david king vino | = 2.20.1 | No fix listed |
| david king vino | = 2.21 | No fix listed |
| david king vino | = 2.21.1 | No fix listed |
| david king vino | = 2.21.2 | No fix listed |
| david king vino | = 2.21.3 | No fix listed |
| david king vino | = 2.21.90 | No fix listed |
| david king vino | = 2.21.91 | No fix listed |
| david king vino | = 2.21.92 | No fix listed |
| david king vino | = 2.22 | No fix listed |
| david king vino | = 2.22.1 | No fix listed |
| david king vino | = 2.22.2 | No fix listed |
| david king vino | = 2.23 | No fix listed |
| david king vino | = 2.23.5 | No fix listed |
| david king vino | = 2.23.90 | No fix listed |
| david king vino | = 2.23.91 | No fix listed |
| david king vino | = 2.23.92 | No fix listed |
| david king vino | = 2.24 | No fix listed |
| david king vino | = 2.24.1 | No fix listed |
| david king vino | = 2.25 | No fix listed |
| david king vino | = 2.25.3 | No fix listed |
| david king vino | = 2.25.4 | No fix listed |
| david king vino | = 2.25.5 | No fix listed |
| david king vino | = 2.25.90 | No fix listed |
| david king vino | = 2.25.91 | No fix listed |
| david king vino | = 2.25.92 | No fix listed |
| david king vino | = 2.26 | No fix listed |
| david king vino | = 2.26.1 | No fix listed |
| david king vino | = 2.26.2 | No fix listed |
| david king vino | = 2.27 | No fix listed |
| david king vino | = 2.27.5 | No fix listed |
| david king vino | = 2.27.90 | No fix listed |
| david king vino | = 2.27.91 | No fix listed |
| david king vino | = 2.27.92 | No fix listed |
| david king vino | = 2.28 | No fix listed |
| david king vino | = 2.28.1 | No fix listed |
| david king vino | = 2.28.2 | No fix listed |
| david king vino | = 2.28.3 | No fix listed |
| david king vino | = 2.31.4 | No fix listed |
| david king vino | = 2.31.91 | No fix listed |
| david king vino | = 2.32.0 | No fix listed |
| david king vino | = 2.32.1 | No fix listed |
| david king vino | = 2.32.2 | No fix listed |
| david king vino | = 2.99.0 | No fix listed |
| david king vino | = 2.99.1 | No fix listed |
| david king vino | = 2.99.2 | No fix listed |
| david king vino | = 2.99.3 | No fix listed |
| david king vino | = 2.99.4 | No fix listed |
| david king vino | = 2.99.5 | No fix listed |
| david king vino | = 3.0.0 | No fix listed |
| david king vino | = 3.0.1 | No fix listed |
| david king vino | = 3.0.2 | No fix listed |
| david king vino | = 3.0.3 | No fix listed |
| david king vino | = 3.1 | No fix listed |
| david king vino | = 3.1.1 | No fix listed |
| david king vino | = 3.1.2 | No fix listed |
| david king vino | = 3.1.3 | No fix listed |
| david king vino | = 3.1.4 | No fix listed |
| david king vino | = 3.1.5 | No fix listed |
| david king vino | = 3.1.90 | No fix listed |
| david king vino | = 3.1.91 | No fix listed |
References
- Debian Security Tracker CVE-2011-1165 vendor-advisory
- git.gnome.org exploit patch
- RHSA-2013:0169 vendor-advisory
- www.dslreports.com
- bugzilla.gnome.org
- bugzilla.redhat.com