CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

Code injection

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

CVE-2012-0681

Apple Remote Desktop (ARD) before version 3.6.1 is vulnerable to information disclosure when connecting to third‑party VNC servers with the Encrypt all network data setting enabled. The underlying issue is ARD not encrypting VNC traffic or warning the user, allowing an attacker to sniff cleartext...

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

Apple Remote Desktop < 3.5.3 / 3.6.1 Information Disclosure (Mac OS X)

According to its version, the Admin component in the Apple Remote Desktop install on the remote host reportedly fails to encrypt data and does not issue a warning when connecting to a third-party VNC server with 'Encrypt all network data' set. This could lead to information disclosure. C Tenable...

Fedora 17 : qemu-1.0.1-1.fc17 (2012-11302)

Fix systemtap tapsets bz 831763 - Fix VNC audio tunnelling bz 840653 - CVE-2012-2652: Possible symlink attacks with -snapshot bz 825697, bz 824919 - Don't renable ksm on update bz 815156 - Bump usbredir dep bz 812097 - Fix RPM install error on non-virt machines bz 660629 - Obsolete openbios to...

Scientific Linux Security Update : vnc on SL3.x, SL4.x, SL5.x i386/x86_64

An insufficient input validation flaw was discovered in the VNC client application, vncviewer. If an attacker could convince a victim to connect to a malicious VNC server, or when an attacker was able to connect to vncviewer running in the 'listen' mode, the attacker could cause the victim's...

Scientific Linux Security Update : qemu-kvm on SL6.x x86_64

A flaw was found in the way the VNC 'password' option was handled. Clearingaa password disabled VNC authentication, allowing a remote user able to connect to the virtual machines' VNC ports to open a VNC session without authentication. CVE-2011-0011 After installing this update, shut down all...

Scientific Linux Security Update : virt-v2v on SL6.x x86_64

virt-v2v is a tool for converting and importing virtual machines to libvirt-managed KVM Kernel-based Virtual Machine. Using virt-v2v to convert a guest that has a password-protected VNC console to a KVM guest removed that password protection from the converted guest: after conversion, a password...

Authentication Capture: VNC

This module provides a fake VNC service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: VNC', 'Description' = %q...

RedHat Update for virt-v2v RHSA-2011:1615-03

Check for the Version of virt-v2v OpenVAS Vulnerability Test RedHat Update for virt-v2v RHSA-2011:1615-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2011-0011

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

Authentication flaw

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

CVE-2011-0011

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

CVE-2011-0011

CVE-2011-0011 affects qemu-kvm prior to 0.11.0, where clearing the VNC password disables authentication and allows a remote user to open VNC sessions without authentication. Red Hat, Oracle Linux, Scientific Linux and MiracleLinux advisories from 2011 document the fix as a backported patch; remed...

RedHat Update for tigervnc RHSA-2011:0871-01

Check for the Version of tigervnc OpenVAS Vulnerability Test RedHat Update for tigervnc RHSA-2011:0871-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for qemu-kvm RHSA-2011:0345-01

Check for the Version of qemu-kvm OpenVAS Vulnerability Test RedHat Update for qemu-kvm RHSA-2011:0345-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for tigervnc RHSA-2011:0871-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for qemu-kvm RHSA-2011:0345-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : openstack-nova-2012.1-2.fc17 (2012-6273)

Sync up with Essex stable branch - Support more flexible guest image file injection - Enforce quota on security group rules CVE-2012-2101 - Provide startup scripts for the Essex VNC services - Provide a startup script for the separated metadata api service update to essex release Note that...