CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0167

CVE-2001-0167 describes a buffer overflow in the RealVNC/WinVNC client prior to or at version 3.3.3r7 (WinVNC) that can be triggered by a crafted rfbConnFailed packet and a long reason string, allowing a remote attacker to execute arbitrary code with the user’s privileges. Connected sources show ...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-1422

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...

CVE-2000-1164

WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...

Re: Новости 20 ноября 2000 г.

Проблемы с WinVNC Опубликовано: 20 ноября 2000 г. Источник: BUGTRAQ Тип: локальная Опасность: 5 Описание: Создаваемый ключ в реестре содержит пароли администрирования и позволяет редактирование пользователем. Продукты: WinVNC 3.3 Документы: Gossi The Dog, WinVNC 3.3.x,...

Проблемы с WinVNC

Создаваемый ключ в реестре содержит пароли администрирования и позволяет редактирование пользователем. Пароли хранятся в обратимом виде...

WinVNC 3.3.x

So, you use WinVNC and Windows NT4 Workstation/Server...? During the InstallShield setup utility, it creates the registry key: HKEYLOCALMACHINESoftwareORLWinVNC3 which is used to store all of WinVNC's default settings. By default, Administrator and SYSTEM have full control, and Everybody has...