Login Request a demo
Unscored severity · published Jul 18, 2006
CVE-2006-2450
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which…
–
CVSS
4.4%
EPSS
No
On KEV
Description
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libvncserver · Libvncserver
0.7.1 · source: NVD
Affected product
LI
Libvncserver
Libvncserver
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2450
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2450
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824
Patch
http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u
seclists.org
http://seclists.org/fulldisclosure/2022/May/29
Patch
http://secunia.com/advisories/20940
secunia.com
http://secunia.com/advisories/21179
secunia.com
http://secunia.com/advisories/21349
More from Libvncserver
–
CVE-2014-6053
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText…
–
CVE-2014-6052
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to…
–
CVE-2014-6054
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error…
–
CVE-2014-6055
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service…
–
CVE-2014-6051
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly…