S-234: Ultra VNC Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-234: Ultra VNC Vulnerability
# 1  
Old 03-27-2008
S-234: Ultra VNC Vulnerability

Ultra VNC viewer contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute arbitrary code. The risk is MEDIUM. A remote, unauthenticated attacker may be able to execute arbitrary code.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. UNIX and Linux Applications

VNC trouble

I have been having issues with VNC. I have been gettining a lot of errors but mostly gray screens and some black screens. I think this may also be a gnome error. I know that the xstartup file is the file to look at. > more ~/.vnc/xstartup #!/bin/sh && xrdb $HOME/.Xresources xsetroot -solid... (0 Replies)
Discussion started by: bitlord
0 Replies

2. Solaris

VNC Connect

Hi all, Almost at my wit ends, trying to connect to vnc port 0 on Solaris 10. configured Xservers with the followin: :0 Local local_uid@none root /usr/X11/bin/Xserver :0 -rfbauth /etc/.vnc/passwd -rfbport 5900 :1 Local local_uid@none root /usr/X11/bin/Xserver :1 -rfbauth... (1 Reply)
Discussion started by: srage
1 Replies

3. Shell Programming and Scripting

How to replace string $str1_str2_str3_str4$ to 12.345.65.234

Hi Friends, I have some problem in replacing a string which is enclosed between $ signs. Please see below: I am trying to replace the string ($str1_str2_str3_str4$) with 12.345.65.234 but no luck... I am using the following command for this but it's not doing anything, if I take out the second... (4 Replies)
Discussion started by: venkatba
4 Replies

4. Solaris

I need to clone an ultra 1 onto and ultra 60

I need to move everything from an older ultra 1 onto a newer ultra 60 (OS and all) running SUNOS 5.5.1. Any suggestions on the best way to do this? Frank P.S. If you know of a document somewhere please let me know. (11 Replies)
Discussion started by: frankkahle
11 Replies

5. UNIX for Dummies Questions & Answers

Vnc

Anyone know of a site where I can download a copy (non-evaluation copy and preferably free. ;) nods to Neo's post in UNIX Operating System thread) of VNC for RedHat 8? Thanks in advance. (7 Replies)
Discussion started by: google
7 Replies
Login or Register to Ask a Question
vncpasswd(1)						     Virtual Network Computing						      vncpasswd(1)

NAME
vncpasswd - change a VNC password SYNOPSIS
vncpasswd [passwd-file] DESCRIPTION
vncpasswd allows you to set the password used to access VNC desktops. It stores an obfuscated version of the password in the given file (default $HOME/.vnc/passwd). The vncserver script runs vncpasswd the first time you start a VNC desktop, and invokes Xvnc with the appro- priate -rfbauth option. vncviewer can also be given a password file to use via the -passwd option. The password must be at least six characters long, and only the first eight characters are significant. Note that the stored password is not encrypted securely - anyone who has access to this file can trivially find out the plaintext password, so vncpasswd always sets appro- priate permissions (read and write only by the owner). However, when accessing a VNC desktop a challenge-response mechanism is used over the wire making it hard for anyone to crack the password simply by snooping on the network. FILES
$HOME/.vnc/passwd Default location of the VNC password file. SEE ALSO
vncviewer(1), vncserver(1), Xvnc(1) vncconfig(1), http://www.realvnc.com AUTHOR
Tristan Richardson, RealVNC Ltd. VNC was originally developed by the RealVNC team while at Olivetti Research Ltd / AT&T Laboratories Cambridge. It is now being maintained by RealVNC Ltd. See http://www.realvnc.com for details. RealVNC Ltd 03 Mar 2005 vncpasswd(1)