CVE-2006-2369: RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published May 15, 2006

CVE-2006-2369

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client…

–

CVSS

92.4%

EPSS

No

On KEV

Description

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password.

Exploitation

Is it being used?

Exploit prediction (EPSS)92.4% · higher than 100% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

RE

4.1.1 · source: NVD

Affected product

RE

Realvnc

Vnc

All Realvnc CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2006-2369

https://www.cve.org/CVERecord?id=CVE-2006-2369

http://secunia.com/advisories/20107

http://secunia.com/advisories/20109

http://secunia.com/advisories/20789

http://www.vupen.com/english/advisories/2006/1790

http://www.vupen.com/english/advisories/2006/1821

http://www.vupen.com/english/advisories/2006/2492

More from Realvnc

–

RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900