CVE-2011-1775
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-1775
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
TigerVNC证书验证安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TigerVNC 1.1beta1版本的vncviewer组件中存在安全绕过漏洞，由于common/rfb/CSecurityTLS.cxx中的CSecurityTLS::processMsg函数不能正确验证服务器X.509证书。中间人攻击者可以借助任意证书欺骗TLS VNC服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-1775
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-1775
Please Login to view more intelligence information
- https://bugzilla.redhat.com/show_bug.cgi?id=702470x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=702672x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060567.htmlvendor-advisoryx_refsource_FEDORA
- http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01342.htmlmailing-listx_refsource_MLIST
- http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01347.htmlmailing-listx_refsource_MLIST
- http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01345.htmlmailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2011-1775
Same Patch Batch · n/a · 2011-05-26 · 14 CVEs total
| CVE-2010-2246 | Daniel Friesel feh '--wget-timestamp'远程代码执行漏洞 | |
| CVE-2011-1758 | Fedoraproject System Security Services Daemon Automatic Ticket Renewal Credentials Cache文件 | |
| CVE-2010-4251 | Linux kernel net/core/sock.c套接字实现拒绝服务漏洞 | |
| CVE-2010-4805 | Linux kernel net/core/sock.c套接字实现拒绝服务漏洞 | |
| CVE-2010-4806 | IBM Web Content Manager程序编写工具权限许可和访问控制漏洞 | |
| CVE-2010-4807 | IBM Web Content Manager无限递归查询漏洞 | |
| CVE-2011-1581 | Linux kernel drivers/net/bonding/bond_main.c bond_select_queue函数输入验证错误漏洞 | |
| CVE-2011-1801 | Google Chrome Popup Blocker安全绕过漏洞 | |
| CVE-2011-1804 | WebKit 输入验证错误漏洞 | |
| CVE-2011-1806 | Google Chrome GPU命令缓冲区内存破坏漏洞 | |
| CVE-2011-1807 | Google Chrome Blob处理越界远程代码执行漏洞 | |
| CVE-2011-2172 | IBM WebSphere Portal Search Center跨站脚本攻击漏洞 | |
| CVE-2011-2173 | IBM WebSphere Portal OutputMediator对象实现拒绝服务漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2011-1775
No comments yet