Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

Vino may open router ports for remote access

CVE-2011-1165 · published 13 years ago
Summary

The Vino remote‑desktop program on Debian can automatically open ports on a UPnP router when the "Configure network to automatically accept connections" option is turned on. This can allow an attacker on the internet to reach the computer more easily. Turn off that setting or upgrade to a version that documents and controls the behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian vino All versions
– david_king vino <= 3.1.92
0.12
0.14
2.7
2.7.3
2.7.3.1
2.7.4
2.7.4.90
2.7.4.91
2.7.90
2.7.91
2.7.92
91 more version ranges
cpe:2.3:a:david_king:vino:*:*:*:*:*:*:*:*
Original advisory text
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it ea...
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
References
Severity
5.1 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published12 Mar 2013
Updated29 Oct 2026
First seen11 Sep 2026
Sources
DEBIAN-CVE-2011-1165 · OSV
CVE-2011-1165 · NVD
Track software like this
Free during beta