258 matches found
realvnc-auth-bypass NSE Script
Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. See also: vnc-brute.nse vnc-title.nse Script Arguments vulns.short, vulns.showall See the documentation for the vulns library. Example Usage nmap -sV --script=realvnc-auth-bypass Script Output PORT STATE...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-2369
The CVE-2008-2369 issue affects Red Hat Network Satellite Server prior to 5.1.1, where the XML-RPC script manzier.pxt contains a hard-coded authentication key. This enables remote attackers to connect to the Satellite Server and obtain information about users and entitlements (e.g., login names, ...
CVE-2008-2369
manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements...
VNC Authentication None Detection
Detect VNC servers that support the "None" authentication method. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VNC Authentication None Detection', 'Description' = 'Detect VNC servers that...
Debian Security Advisory DSA 813-1 (centericq)
The remote host is missing an update to centericq announced via advisory DSA 813-1. Several problems have been discovered in libgadu which is also part of centericq, a text-mode multi-protocol instant messenger client. The Common Vulnerabilities and Exposures project identifies the following...
CVE-2002-2369
CVE-2002-2369 affects Perception LiteServe 2.0. The issue enables an attacker to read password-protected files by using a URL containing a leading "/./" sequence, implying a path-traversal flaw in the web-access interface. The provided documents do not specify affected versions beyond LiteServe 2...
RealVNC Password Authentication Bypass (CVE-2006-2369)
...
Immunity Canvas: REALVNC_NOAUTH
Name| realvncnoauth ---|--- CVE| CVE-2006-2369 Exploit Pack| CANVAS Description| REALVNCNOAUTH Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: RealVNC CVE Url: https://vulners.com/cve/CVE-2006-2369 CVE Name: CVE-2006-2369...
CVE-2006-2369
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server,...
CVE-2006-2369
CVE-2006-2369 describes an authentication bypass in RealVNC 4.1.1 and other products using RealVNC (e.g., AdderLink IP, Cisco CallManager). The issue arises when a client proposes an insecure security type such as “Type 1 - None,” which the server may accept even if not offered, enabling remote a...
CVE-2004-2369
Technical details (affected product/component/root cause/impact/fix) are not publicly available in the provided documents for CVE-2004-2369. Monitor official advisories for updates; current data only confirms a directory traversal vulnerability in webadmin.nsf.
USN-162-1: ekg and Gadu library vulnerabilities
Marcin Owsiany and Wojtek Kaniewski discovered that some contributed scripts contrib/ekgh, contrib/ekgnv.sh, and contrib/getekg.sh in the ekg package created temporary files in an insecure way, which allowed exploitation of a race condition to create or overwrite files with the privileges of the...
CVE-2005-2446
CVE-2005-2446 is rejected/not used per description; refer to CVE-2005-2369 for the active entry.
CVE-2005-2446
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2369. Reason: This candidate is a duplicate of CVE-2005-2369. Notes: All CVE users should reference CVE-2005-2369 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-2369
CVE-2005-2369 is a libgadu issue (used by ekg and centericq) with multiple integer signedness errors that can lead to remote denial of service or arbitrary code execution. Connected advisories (Debian DSA-813-1; Ubuntu USN-162-1; CentOS/Nessus entries) confirm the vulnerability and reference libg...
