{"id":5581,"date":"2012-08-23T09:41:16","date_gmt":"2012-08-23T16:41:16","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=5581"},"modified":"2013-04-10T07:35:20","modified_gmt":"2013-04-10T14:35:20","slug":"apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/","title":{"rendered":"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later"},"content":{"rendered":"<p>On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote Desktop 3.0 or later, which fixes an issue when connecting to a third-party VNC server with \u201cEncrypt all network data\u201d set. Outlined under <a href=\"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-0681\" target=\"_blank\">CVE-2012-0681<\/a>, the vulnerability allows remote attackers to \u201cobtain cleartext VNC session content by sniffing the network,\u201d leading to possible information disclosure.<\/p>\n<p><a href=\"http:\/\/support.apple.com\/kb\/HT5433\" target=\"_blank\">Apple further described<\/a> the vulnerability:<\/p>\n<blockquote><p>When connecting to a third-party VNC server with &#8220;Encrypt all network data&#8221; set, data is not encrypted and no warning is produced. This issue is addressed by creating an SSH tunnel for the VNC connection in this configuration, and preventing the connection if the SSH tunnel cannot be created. This issue does not affect Apple Remote Desktop 3.5.1 and earlier.<\/p><\/blockquote>\n<p>Apple Remote Desktop 3.6.1 may be obtained from the Mac App Store, the Software Update pane in System Preferences, or <a href=\"http:\/\/www.apple.com\/support\/downloads\/\" target=\"_blank\">Apple\u2019s Software Downloads<\/a> page.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote Desktop 3.0 or later, which fixes an issue when connecting to a third-party VNC server with \u201cEncrypt all network data\u201d set. Outlined under CVE-2012-0681, the vulnerability allows remote attackers to \u201cobtain cleartext [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":8761,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[3151,349,201],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<meta name=\"description\" content=\"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2012-08-23T16:41:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-04-10T14:35:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"260\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Derek Erwin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\",\"name\":\"Intego\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg\",\"width\":\"400\",\"height\":\"260\",\"caption\":\"Apple security updates\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/\",\"name\":\"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage\"},\"datePublished\":\"2012-08-23T16:41:16+00:00\",\"dateModified\":\"2013-04-10T14:35:20+00:00\",\"description\":\"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote\",\"breadcrumb\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.intego.com\/mac-security-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage\"},\"author\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d7586ee278e291223dbae05ec1d95812\"},\"headline\":\"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later\",\"datePublished\":\"2012-08-23T16:41:16+00:00\",\"dateModified\":\"2013-04-10T14:35:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage\"},\"wordCount\":164,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg\",\"keywords\":[\"Apple\",\"Apple Remote Desktop\",\"Security Updates\"],\"articleSection\":[\"Security &amp; Privacy\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#respond\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d7586ee278e291223dbae05ec1d95812\",\"name\":\"Derek Erwin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f88b4bb259f7d5b1d10884ffa4b3c126?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f88b4bb259f7d5b1d10884ffa4b3c126?s=96&d=mm&r=g\",\"caption\":\"Derek Erwin\"},\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/author\/derek-erwin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"description":"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/","og_locale":"en_US","og_type":"article","og_title":"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later - The Mac Security Blog","og_description":"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote","og_url":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/","og_site_name":"The Mac Security Blog","article_published_time":"2012-08-23T16:41:16+00:00","article_modified_time":"2013-04-10T14:35:20+00:00","og_image":[{"width":"400","height":"260","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Derek Erwin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo"}},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg","width":"400","height":"260","caption":"Apple security updates"},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage","url":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/","name":"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage"},"datePublished":"2012-08-23T16:41:16+00:00","dateModified":"2013-04-10T14:35:20+00:00","description":"On August 20, Apple released security updates to fix vulnerabilities found in Apple Remote Desktop. The recommended update is available for Apple Remote","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later"}]},{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage"},"author":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d7586ee278e291223dbae05ec1d95812"},"headline":"Apple Releases Security Updates for Apple Remote Desktop 3.0 or Later","datePublished":"2012-08-23T16:41:16+00:00","dateModified":"2013-04-10T14:35:20+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#webpage"},"wordCount":164,"commentCount":0,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg","keywords":["Apple","Apple Remote Desktop","Security Updates"],"articleSection":["Security &amp; Privacy"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intego.com\/mac-security-blog\/apple-releases-security-updates-for-apple-remote-desktop-3-0-or-later\/#respond"]}]},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d7586ee278e291223dbae05ec1d95812","name":"Derek Erwin","image":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/f88b4bb259f7d5b1d10884ffa4b3c126?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f88b4bb259f7d5b1d10884ffa4b3c126?s=96&d=mm&r=g","caption":"Derek Erwin"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/derek-erwin\/"}]}},"jetpack_featured_media_url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/SecurityUpdate.jpg","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4VAYd-1s1","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/5581"}],"collection":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=5581"}],"version-history":[{"count":12,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/5581\/revisions"}],"predecessor-version":[{"id":8829,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/5581\/revisions\/8829"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media\/8761"}],"wp:attachment":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=5581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=5581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=5581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}