Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1775
HistoryMay 26, 2011 - 6:55 p.m.

CVE-2011-1775

2011-05-2618:55:02
CWE-20
[email protected]
web.nvd.nist.gov
2

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON

The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server’s X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.

Affected configurations

Nvd
Node
tigervnctigervncMatch1.1beta1
VendorProductVersionCPE
tigervnctigervnc1.1cpe:2.3:a:tigervnc:tigervnc:1.1:beta1:*:*:*:*:*:*

Related

redhat 1
openvas 5
cve 1
prion 1
debiancve 1
cvelist 1
nessus 4
fedora 1
altlinux 1
oraclelinux 1
veracode 1
redhat
redhat
(RHSA-2011:0871) Moderate: tigervnc security update
2011-06-15 00:00:00
openvas
openvas
RedHat Update for tigervnc RHSA-2011:0871-01
2012-06-06 00:00:00
TigerVNC SSL Certificate Validation Security Bypass Vulnerability - Windows
2011-06-13 00:00:00
Oracle: Security Advisory (ELSA-2011-0871)
2015-10-06 00:00:00
cve
cve
CVE-2011-1775
2011-05-26 18:55:02
prion
prion
Command injection
2011-05-26 18:55:00
debiancve
debiancve
CVE-2011-1775
2011-05-26 18:55:02
cvelist
cvelist
CVE-2011-1775
2011-05-26 18:00:00
nessus
nessus
Oracle Linux 6 : tigervnc (ELSA-2011-0871)
2013-07-12 00:00:00
Scientific Linux Security Update : tigervnc on SL6.x i386/x86_64
2012-08-01 00:00:00
Fedora 15 : tigervnc-1.0.90-4.fc15 (2011-6838)
2011-05-25 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: tigervnc-1.0.90-4.fc15
2011-05-25 02:35:08
altlinux
altlinux
Security fix for the ALT Linux 6 package tigervnc version 1.0.90-alt5
2011-06-21 00:00:00
oraclelinux
oraclelinux
tigervnc security update
2011-06-15 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 01:03:57

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON
Related for NVD:CVE-2011-1775
redhat1openvas5cve1prion1debiancve1cvelist1nessus4fedora1altlinux1oraclelinux1veracode1