Lucene search
HistoryMay 05, 2006 - 12:46 p.m.
CVE-2006-2206
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
Affected configurations
Node
ultravncultravncMatch1.0.1
Related
cve
cve
CVE-2006-2206
2006-05-05 12:46:00
prion
prion
Authentication flaw
2006-05-05 12:46:00
cvelist
cvelist
CVE-2006-2206
2006-05-05 10:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
Related for NVD:CVE-2006-2206