CVE-2010-4252

OpenSSL CVE-2010-4252: When J-PAKE is enabled, OpenSSL

LTSP: Authentication bypass in included LibVNCServer code

Background The Linux Terminal Server Project adds thin-client support to Linux servers. Description The LTSP server includes vulnerable LibVNCServer code, which fails to properly validate protocol types effectively letting users decide what protocol to use, such as "Type 1 - None" GLSA-200608-05...

GLSA-200608-05 : LibVNCServer: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200608-05 LibVNCServer: Authentication bypass LibVNCServer fails to properly validate protocol types effectively letting users decide what protocol to use, such as 'Type 1 - None'. LibVNCServer will accept this security type, even...