CVE-2011-1164: Medium severity david king vino vulnerability
Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
Other sources
When vino-preferences starts, it spends a while "Checking the connectivity of this machine..." and then reports:
"Your desktop is only reachable over the local network. Others can access your computer using the address 90.155.92.250 or macbook.local."
This is nonsense. It's reachable from anywhere. And why on earth hasn't it managed a reverse DNS lookup?
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1164?
CVE-2011-1164 is rated as a moderate severity vulnerability.
How do I fix CVE-2011-1164?
To fix CVE-2011-1164, update Vino to version 2.99.4 or later.
What versions of Vino are affected by CVE-2011-1164?
CVE-2011-1164 affects Vino versions before 2.99.4.
What type of vulnerability is CVE-2011-1164?
CVE-2011-1164 is a network access vulnerability that allows unintended external connections.
Who is impacted by CVE-2011-1164?
Users of Vino versions before 2.99.4 are at risk of exploitation via CVE-2011-1164.