CVE-2011-1165: Medium severity david king vino vulnerability
Created attachment 479752 [details] Screenshot of what UPnP means.
Description of problem: System ---> Preferences ---> Remote Desktop does not sufficiently warn that UPnP is being used to open ports on your router. When end user is testing, he very well may disables confirmation and password. Because there is no very explicit UPnP warning, he just unwittingly enabled anybody on the internet to connect to his desktop.
Version-Release number of selected component (if applicable): vino 2.32.0-1.fc14
How reproducible: parts always, UPnP success at opening router port varies. Sometimes, it successfully opens a port, other times it does not.
Steps to Reproduce: 1.System --> Preferences --> Remote Desktop 2.uncheck confirmation, uncheck password 3.check "Configure network to automatically accept connections." Actual results: Changed router configuration without telling user. Expose machine to internet usage with no password and no confirmation.
Expected results: Text should be more explicit that this uses UPnP. The pop up message mentions UPnP, but it at least should be a red warning. Especially when no confirmation and no password is required.
Additional info: All machines tested have multiple NICs. selinux enabled. iptables turned off. It may take several attempts to open up ports on router using UPnP. Not sure what happens upon reboot of workstation and router -- UPnP may work to open ports that were not open before.
Other sources
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1165?
CVE-2011-1165 is assigned a medium severity due to its potential for exploitation leading to unauthorized access.
How do I fix CVE-2011-1165?
To fix CVE-2011-1165, upgrade Vino to version 2.32.2 or later, in which the vulnerability is patched.
Which versions of Vino are affected by CVE-2011-1165?
CVE-2011-1165 affects multiple versions of Vino, including several iterations from 0.12 up to 3.1.92.
What type of vulnerability is CVE-2011-1165?
CVE-2011-1165 is a security vulnerability related to remote code execution and unauthorized access.
What impact does CVE-2011-1165 have on users?
The impact of CVE-2011-1165 on users can include unauthorized control over their systems, leading to privacy breaches and data loss.