CVE-2011-1165
Summary
| CVE | CVE-2011-1165 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-03-12 23:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks. |
Risk And Classification
Primary CVSS: v2.0 5.1 from [email protected]
AV:N/AC:H/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:H/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | David King | Vino | 0.12 | All | All | All |
| Application | David King | Vino | 0.14 | All | All | All |
| Application | David King | Vino | 2.10 | All | All | All |
| Application | David King | Vino | 2.11 | All | All | All |
| Application | David King | Vino | 2.11.1 | All | All | All |
| Application | David King | Vino | 2.11.1.1 | All | All | All |
| Application | David King | Vino | 2.11.1.2 | All | All | All |
| Application | David King | Vino | 2.11.90 | All | All | All |
| Application | David King | Vino | 2.11.92 | All | All | All |
| Application | David King | Vino | 2.12 | All | All | All |
| Application | David King | Vino | 2.13 | All | All | All |
| Application | David King | Vino | 2.13.5 | All | All | All |
| Application | David King | Vino | 2.14 | All | All | All |
| Application | David King | Vino | 2.15 | All | All | All |
| Application | David King | Vino | 2.16 | All | All | All |
| Application | David King | Vino | 2.17 | All | All | All |
| Application | David King | Vino | 2.17.2 | All | All | All |
| Application | David King | Vino | 2.17.4 | All | All | All |
| Application | David King | Vino | 2.17.5 | All | All | All |
| Application | David King | Vino | 2.17.92 | All | All | All |
| Application | David King | Vino | 2.18 | All | All | All |
| Application | David King | Vino | 2.18.1 | All | All | All |
| Application | David King | Vino | 2.19 | All | All | All |
| Application | David King | Vino | 2.19.5 | All | All | All |
| Application | David King | Vino | 2.19.90 | All | All | All |
| Application | David King | Vino | 2.19.92 | All | All | All |
| Application | David King | Vino | 2.20 | All | All | All |
| Application | David King | Vino | 2.20.1 | All | All | All |
| Application | David King | Vino | 2.21 | All | All | All |
| Application | David King | Vino | 2.21.1 | All | All | All |
| Application | David King | Vino | 2.21.2 | All | All | All |
| Application | David King | Vino | 2.21.3 | All | All | All |
| Application | David King | Vino | 2.21.90 | All | All | All |
| Application | David King | Vino | 2.21.91 | All | All | All |
| Application | David King | Vino | 2.21.92 | All | All | All |
| Application | David King | Vino | 2.22 | All | All | All |
| Application | David King | Vino | 2.22.1 | All | All | All |
| Application | David King | Vino | 2.22.2 | All | All | All |
| Application | David King | Vino | 2.23 | All | All | All |
| Application | David King | Vino | 2.23.5 | All | All | All |
| Application | David King | Vino | 2.23.90 | All | All | All |
| Application | David King | Vino | 2.23.91 | All | All | All |
| Application | David King | Vino | 2.23.92 | All | All | All |
| Application | David King | Vino | 2.24 | All | All | All |
| Application | David King | Vino | 2.24.1 | All | All | All |
| Application | David King | Vino | 2.25 | All | All | All |
| Application | David King | Vino | 2.25.3 | All | All | All |
| Application | David King | Vino | 2.25.4 | All | All | All |
| Application | David King | Vino | 2.25.5 | All | All | All |
| Application | David King | Vino | 2.25.90 | All | All | All |
| Application | David King | Vino | 2.25.91 | All | All | All |
| Application | David King | Vino | 2.25.92 | All | All | All |
| Application | David King | Vino | 2.26 | All | All | All |
| Application | David King | Vino | 2.26.1 | All | All | All |
| Application | David King | Vino | 2.26.2 | All | All | All |
| Application | David King | Vino | 2.27 | All | All | All |
| Application | David King | Vino | 2.27.5 | All | All | All |
| Application | David King | Vino | 2.27.90 | All | All | All |
| Application | David King | Vino | 2.27.91 | All | All | All |
| Application | David King | Vino | 2.27.92 | All | All | All |
| Application | David King | Vino | 2.28 | All | All | All |
| Application | David King | Vino | 2.28.1 | All | All | All |
| Application | David King | Vino | 2.28.2 | All | All | All |
| Application | David King | Vino | 2.28.3 | All | All | All |
| Application | David King | Vino | 2.31.4 | All | All | All |
| Application | David King | Vino | 2.31.91 | All | All | All |
| Application | David King | Vino | 2.32.0 | All | All | All |
| Application | David King | Vino | 2.32.1 | All | All | All |
| Application | David King | Vino | 2.32.2 | All | All | All |
| Application | David King | Vino | 2.7 | All | All | All |
| Application | David King | Vino | 2.7.3 | All | All | All |
| Application | David King | Vino | 2.7.3.1 | All | All | All |
| Application | David King | Vino | 2.7.4 | All | All | All |
| Application | David King | Vino | 2.7.4.90 | All | All | All |
| Application | David King | Vino | 2.7.4.91 | All | All | All |
| Application | David King | Vino | 2.7.90 | All | All | All |
| Application | David King | Vino | 2.7.91 | All | All | All |
| Application | David King | Vino | 2.7.92 | All | All | All |
| Application | David King | Vino | 2.8 | All | All | All |
| Application | David King | Vino | 2.8.0 | All | All | All |
| Application | David King | Vino | 2.8.0.1 | All | All | All |
| Application | David King | Vino | 2.8.1 | All | All | All |
| Application | David King | Vino | 2.9 | All | All | All |
| Application | David King | Vino | 2.9.2 | All | All | All |
| Application | David King | Vino | 2.99.0 | All | All | All |
| Application | David King | Vino | 2.99.1 | All | All | All |
| Application | David King | Vino | 2.99.2 | All | All | All |
| Application | David King | Vino | 2.99.3 | All | All | All |
| Application | David King | Vino | 2.99.4 | All | All | All |
| Application | David King | Vino | 2.99.5 | All | All | All |
| Application | David King | Vino | 3.0.0 | All | All | All |
| Application | David King | Vino | 3.0.1 | All | All | All |
| Application | David King | Vino | 3.0.2 | All | All | All |
| Application | David King | Vino | 3.0.3 | All | All | All |
| Application | David King | Vino | 3.1 | All | All | All |
| Application | David King | Vino | 3.1.1 | All | All | All |
| Application | David King | Vino | 3.1.2 | All | All | All |
| Application | David King | Vino | 3.1.3 | All | All | All |
| Application | David King | Vino | 3.1.4 | All | All | All |
| Application | David King | Vino | 3.1.5 | All | All | All |
| Application | David King | Vino | 3.1.90 | All | All | All |
| Application | David King | Vino | 3.1.91 | All | All | All |
| Application | David King | Vino | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Bug 678846 – CVE-2011-1165 vino-preferences does not warn about UPnP especially with no password and no confirmation. | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | |
| Ubuntu computer hijacked by hacker - Unix and Linux | DSLReports Forums | af854a3a-2127-422b-91ae-364da2661108 | www.dslreports.com | |
| Improve description of UPnP feature, bug 594521 (410bbf8e) · Commits · Archive / vino · GitLab | af854a3a-2127-422b-91ae-364da2661108 | git.gnome.org | Exploit, Patch |
| Bug 594521 – mysterious option not explained | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.gnome.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.