Lucene search
HistoryMay 05, 2006 - 12:46 p.m.
CVE-2006-2206
ultravnc
ultr@vnc
ms-logon
authentication
weak encryption
remote attackers
privileges
cve-2006-2206
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
Affected configurations
Node
ultravncultravncMatch1.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultravnc:ultravnc | ultravnc | eq | 1.0.1 |
Related
cvelist
cvelist
CVE-2006-2206
2006-05-05 10:00:00
nvd
nvd
CVE-2006-2206
2006-05-05 12:46:00
prion
prion
Authentication flaw
2006-05-05 12:46:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
Related for CVE-2006-2206