The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2011-05-26T18:00:00
Updated: 2024-08-06T22:37:25.770Z
Reserved: 2011-04-19T00:00:00
Link: CVE-2011-1775
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-05-26T18:55:02.287
Modified: 2024-11-21T01:27:01.443
Link: CVE-2011-1775
Redhat