Test ID:	1.3.6.1.4.1.25623.1.0.802061
Category:	Denial of Service
Title:	Vino VNC Server Remote Denial Of Service Vulnerability
Summary:	Vino VNC Server is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Vino VNC Server is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Vulnerability is triggered when a VNC client claims to only support protocol version 3.3 and sends malformed data during the authentication selection stage of the authentication process. Vulnerability Impact: Successful exploitation will allow attacker to cause a denial of service. Additionally, after the failure condition has occurred, the log file (~ /.xsession-errors) grows quickly. Affected Software/OS: Vino VNC Server version 3.7.3 and prior. Solution: Upgrade to version 3.7.4 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5745 https://www.trustwave.com/spiderlabs/advisories/TWSL2013-028.txt RedHat Security Advisories: RHSA-2013:1452 http://rhn.redhat.com/errata/RHSA-2013-1452.html http://secunia.com/advisories/55090 SuSE Security Announcement: SUSE-SU-2013:1631 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00003.html http://www.ubuntu.com/usn/USN-1980-1
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.