Apple Remote Desktop Information Disclosure Vulnerability

Apple Remote Desktop is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VNC Server 'password' Password

The VNC server running on the remote host is secured with a weak password. Nessus was able to login using VNC authentication and a password of 'password'. A remote, unauthenticated attacker could exploit this to take control of the system. C Tenable Network Security, Inc. include"compat.inc";...

Apple Remote Desktop < 3.5.3 / 3.6.1 Information Disclosure (Mac OS X)

According to its version, the Admin component in the Apple Remote Desktop install on the remote host reportedly fails to encrypt data and does not issue a warning when connecting to a third-party VNC server with 'Encrypt all network data' set. This could lead to information disclosure. C Tenable...

Debian Security Advisory DSA 2238-1 (vino)

The remote host is missing an update to vino announced via advisory DSA 2238-1. OpenVAS Vulnerability Test $Id: deb22381.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2238-1 vino Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2238-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VNC Server (Reflective Injection), Windows Reverse HTTP Stager (wininet)

Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 444 include Msf::Payload::Stager...

VNC Server Detection

Binary data 5934.prm...

Nmap NSE net: realvnc-auth-bypass

Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. OpenVAS Vulnerability Test $Id: gbnmaprealvncauthbypassnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright:...

CVE-2011-1775

The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate...

CVE-2011-1775

The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate...

Fedora Update for vino FEDORA-2011-6773

Check for the Version of vino OpenVAS Vulnerability Test Fedora Update for vino FEDORA-2011-6773 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for vino FEDORA-2011-6778

Check for the Version of vino OpenVAS Vulnerability Test Fedora Update for vino FEDORA-2011-6778 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

DSA-2238-1 vino - several

Bulletin has no description...

[SECURITY] Fedora 14 Update: vino-2.32.2-1.fc14

Vino is a VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC...

CVE-2011-0904

CVE-2011-0904 affects Vino’s vino-server, specifically the rfbSendFramebufferUpdate path in server/libvncserver/rfbserver.c. When raw encoding is used, remote authenticated users may trigger an out-of-bounds memory access by sending a large X or Y position in a framebuffer update, causing a daemo...

Vino VNC server DoS

Crash on client request processing...

USN-1128-1: Vino vulnerabilities

Kevin Chen discovered that Vino incorrectly handled certain client framebuffer requests. A remote attacker could use this flaw to cause Vino to crash, leading to a denial of service...

BackTrack 5 will also be for Motorola Xoom !

In the past few days offensive-security have been toying with some Motorola hardware, and have managed to get a basic build of BackTrack 5 + toolchain on a Motorola Xoom. The possibilities look exciting as offensive-security are slowly building several experimental arm packages. offensive-securit...

vnc-info NSE Script

Queries a VNC server for its protocol version and supported security types. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 5900/tcp open vnc | vnc-info: | Protocol version: 3.889 | Security types: | Mac OS X security type 30 | Mac OS X security type 35 Requires shortport stdnse strin...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is ...