CVE

Id
49687  
CVE No.
CVE-2011-1775  
Status
Candidate  
Description
The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server"s X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539582 49687 CVE-2011-1775 MLIST:[oss-security] 20110506 CVE request: tigervnc  View
539583 49687 CVE-2011-1775 URL:http://openwall.com/lists/oss-security/2011/05/06/2  View
539584 49687 CVE-2011-1775 MLIST:[oss-security] 20110509 Re: CVE request: tigervnc  View
539585 49687 CVE-2011-1775 URL:http://openwall.com/lists/oss-security/2011/05/09/7  View
539586 49687 CVE-2011-1775 MLIST:[tigervnc-devel] 20110504 Re: potential vulnerability in TLS secType?  View
539587 49687 CVE-2011-1775 URL:http://www.mail-archive.com/tigervnc-devel@lists.sourceforge.net/msg01345.html  View
539588 49687 CVE-2011-1775 MLIST:[tigervnc-devel] 20110504 potential vulnerability in TLS secType?  View
539589 49687 CVE-2011-1775 URL:http://www.mail-archive.com/tigervnc-devel@lists.sourceforge.net/msg01342.html  View
539590 49687 CVE-2011-1775 MLIST:[tigervnc-devel] 20110505 Re: potential vulnerability in TLS secType?  View
539591 49687 CVE-2011-1775 URL:http://www.mail-archive.com/tigervnc-devel@lists.sourceforge.net/msg01347.html  View
539592 49687 CVE-2011-1775 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=702470  View
539593 49687 CVE-2011-1775 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=702672  View
539594 49687 CVE-2011-1775 FEDORA:FEDORA-2011-6838  View
539595 49687 CVE-2011-1775 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060567.html  View
539596 49687 CVE-2011-1775 REDHAT:RHSA-2011:0871  View
539597 49687 CVE-2011-1775 URL:http://www.redhat.com/support/errata/RHSA-2011-0871.html  View
539598 49687 CVE-2011-1775 BID:47738  View
539599 49687 CVE-2011-1775 URL:http://www.securityfocus.com/bid/47738  View
539600 49687 CVE-2011-1775 SECUNIA:44939  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35012 JVNDB-2011-005254 Xen の命令エミュレーションにおけるサービス運用妨害 (DoS) の脆弱性 Xen の命令エミュレーションには、サービス運用妨害 (ホストクラッシュ) 状態にされる脆弱性が存在します。 CVE-2011-1780 49687 6.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005254.html  View