Lucene search

[email protected]CVE-2013-5136

HistoryOct 24, 2013 - 3:48 a.m.

CVE-2013-5136

2013-10-2403:48:00

CWE-200

[email protected]

web.nvd.nist.gov

apple

remote desktop

cve-2013-5136

network security

vnc

authentication

5.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

58.9%

JSON

Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote attackers to obtain sensitive information in opportunistic circumstances by sniffing the network during an unintended cleartext VNC session.

CPENameOperatorVersion
apple:apple_remote_desktopapple apple remote desktopeq3.2.2
apple:apple_remote_desktopapple apple remote desktopeq3.5.4
apple:apple_remote_desktopapple apple remote desktopeq3.5.3
apple:apple_remote_desktopapple apple remote desktople3.6.2
apple:apple_remote_desktopapple apple remote desktopeq3.6
apple:apple_remote_desktopapple apple remote desktopeq3.2.1
apple:apple_remote_desktopapple apple remote desktopeq3.0.0
apple:apple_remote_desktopapple apple remote desktopeq3.4
apple:apple_remote_desktopapple apple remote desktopeq3.1
apple:apple_remote_desktopapple apple remote desktopeq3.3.2

CPE	Name	Operator	Version
apple:apple_remote_desktop	apple apple remote desktop	eq	3.2.2
apple:apple_remote_desktop	apple apple remote desktop	eq	3.5.4
apple:apple_remote_desktop	apple apple remote desktop	eq	3.5.3
apple:apple_remote_desktop	apple apple remote desktop	le	3.6.2
apple:apple_remote_desktop	apple apple remote desktop	eq	3.6
apple:apple_remote_desktop	apple apple remote desktop	eq	3.2.1
apple:apple_remote_desktop	apple apple remote desktop	eq	3.0.0
apple:apple_remote_desktop	apple apple remote desktop	eq	3.4
apple:apple_remote_desktop	apple apple remote desktop	eq	3.1
apple:apple_remote_desktop	apple apple remote desktop	eq	3.3.2

Rows per page:

1-10 of 171

References

lists.apple.com/archives/security-announce/2013/Oct/msg00008.html

5.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVE-2013-5136

prion1 cvelist1 nessus1