CVE-2011-1775 The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-mi...
MediumCVSS 5.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TigerVNC | = 1.1-beta1 | No fix listed |
References
- FEDORA-2011-6838 vendor-advisory
- [oss-security] 20110506 CVE request: tigervnc mailing-list
- [oss-security] 20110509 Re: CVE request: tigervnc mailing-list
- 44939 third-party-advisory
- [tigervnc-devel] 20110504 potential vulnerability in TLS secType? mailing-list
- [tigervnc-devel] 20110504 Re: potential vulnerability in TLS secType? mailing-list
- [tigervnc-devel] 20110505 Re: potential vulnerability in TLS secType? mailing-list
- RHSA-2011:0871 vendor-advisory
- 47738 vdb-entry
- bugzilla.redhat.com
- bugzilla.redhat.com
- Debian Security Tracker CVE-2011-1775 vendor-advisory