Tuesday, January 22, 2013

[USN-1701-1] Vino vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=51jE
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1701-1
January 22, 2013

vino vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS

Summary:

Vino could be made to expose sensitive information over the network.

Software Description:
- vino: VNC server for GNOME

Details:

It was discovered that Vino incorrectly transmitted clipboard activity
before authenticating the remote connection. A remote attacker could
connect to Vino and monitor clipboard activity.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
vino 3.6.0-0ubuntu1.1

Ubuntu 12.04 LTS:
vino 3.4.2-0ubuntu1.2

Ubuntu 11.10:
vino 3.2.0-0ubuntu1.2

Ubuntu 10.04 LTS:
vino 2.28.2-0ubuntu2.2

After a standard system update you need to restart your session to make all
the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1701-1
CVE-2012-4429

Package Information:
https://launchpad.net/ubuntu/+source/vino/3.6.0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/vino/3.4.2-0ubuntu1.2
https://launchpad.net/ubuntu/+source/vino/3.2.0-0ubuntu1.2
https://launchpad.net/ubuntu/+source/vino/2.28.2-0ubuntu2.2

No comments:

Post a Comment