CVE-2012-0681

published 2012-08-22

CVE-2012-0681: Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apple	apple_remote_desktop	—	—
apple	apple_remote_desktop	—	—
apple	apple_remote_desktop	—	—

CWE-310