PT-2012-2787

CVE-2012-0681

·

Published

2012-08-22

·

Updated

2013-04-02

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple Remote Desktop versions prior to 3.6.1
Description The issue allows remote attackers to obtain cleartext VNC session content by sniffing the network, due to the failure to recognize the "Encrypt all network data" setting during connections to third-party VNC servers.
Recommendations For Apple Remote Desktop versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-310
Related identifiers
CVE-2012-0681
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com