[CORE SDI ADVISORY] WinVNC server buffer overflow

CORE SDI http://www.core-sdi.com Vulnerability report for server overflow in ATT VNC for Windows Date Published: 2001-01-29 Advisory ID: CORE-2001011502 Bugtraq ID: 2306 CVE CAN: None currently assigned. Title; ATT VNC Windows Server Buffer Overflow Class: Boundary Error Condition Buffer Overflow...

CVE-2001-1422

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...

Microsoft Windows SMB Registry : WinVNC's Key Permissions

The registry key HKLM\Software\ORL\WinVNC3 is writeable and/or readable by users who are not in the admin group. This key contains the VNC password of this host, as well as other configuration setup. As this program allows remote access to this computer with the privileges of the currently logged...

VNC Software Detection

The remote host is running VNC Virtual Network Computing, which uses the RFB Remote Framebuffer protocol to provide remote access to graphical user interfaces and thus permits a console on the remote host to be displayed on another. This script was written by Patrick Naubert This is version 2.0 o...

vnc.DoS.txt

4/10/99 O.k I dont know if this is an really interresting thing but when I fire up the script Mimeflood.pl on my Linux-sytems against a Virtual Network Computing server who listens on port 5800 for incoming connection http, the program crashes whitin a few seconds. A Couple of ISP here in the...