VNC Server and Protocol Version Detection (TCP)

TCP based detection of Virtual Network Computing VNC services and the underlying Remote Framebuffer Protocol RFB version. SPDX-FileCopyrightText: 2005 Patrick Naubert Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VNC Viewer Detection (HTTP)

HTTP based detection of a VNC viewer. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10758";...

CVE-2002-2088

The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access...

CVE-2002-2088

CVE-2002-2088 affects MOSIX Project clump/os 5.4, where a default VNC account is created without a password. This enables remote attackers to gain root access. The available documents corroborate the basic issue and impact (remote root access) but do not provide versioned patch information or exp...

CVE-2002-2088: Undefined Security Weakness

The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access...

VNC Server Security Type Detection

This script checks the remote VNC server protocol version and the available 'security types'. C Tenable Network Security, Inc. Some information: http://www.nessus.org/u?31a1871a http://www.nessus.org/u?6ad5fd00 http://www.nessus.org/u?99e99399 include"compat.inc"; if description scriptid19288;...

VNC Server (Reflective Injection), Reverse Ordinal TCP Stager (No NX or Win7)

Inject a VNC Dll via a reflective loader staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 93 include Msf::Payload::Stager include...

VNC

...

CVE-2001-1422

The CVE-2001-1422 entry concerns WinVNC 3.3.3 and earlier, where generating the same challenge string for multiple connections allows remote attackers to bypass VNC authentication by sniffing the challenge/response of other users. Affected software: WinVNC versions up to 3.3.3 (and earlier). Unde...

CVE-2004-1750

RealVNC 4.0 and earlier allows remote attackers to cause a denial of service crash via a large number of connections to port 5900...

Hydra: VNC

This plugin runs Hydra to find VNC passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

CVE-2002-1511

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand function instead of srand, which causes vncserver to generate weak cookies...

CVE-2002-1336

TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...

CVE-2002-1336

TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...

VNC Detection (deprecated)

Binary data 1882.prm...

Mandrake Linux Security Advisory : vnc (MDKSA-2003:022)

A vulnerability was discovered in the VNC server script that generates an X cookie, used by X authentication. The script generated a cookie that was not strong enough and allow an attacker to more easily guess the authentication cookie, thus obtaining unauthorized access to the VNC server...

RHEL 2.1 : vnc (RHSA-2003:068)

Updated VNC packages are available to fix a weak cookie vulnerability. VNC is a tool for providing a remote graphical user interface. The VNC server acts as an X server, but the script for starting it generates an MIT X cookie which is used for X authentication without using a strong enough rando...

RHEL 2.1 : vnc (RHSA-2002:287)

Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...

[Full-Disclosure] SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access.

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

Moderate: Red Hat Security Advisory: vnc security update

Updated VNC packages are available to fix a weak cookie vulnerability. VNC is a tool for providing a remote graphical user interface. The VNC server acts as an X server, but the script for starting it generates an MIT X cookie which is used for X authentication without using a strong enough rando...