CVE-2011-1165

Publication date 12 March 2013

Last updated 24 July 2024


Ubuntu priority

Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.

Read the notes from the security team

Status

Package Ubuntu Release Status
vino 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life

Notes


jdstrand

no upstream fix


mdeslaur

oneiric+ has more explicit text: "Automatically configure UPnP router to open and forward ports". Marking as not-affected.