NVD

Id
61071  
Name
CVE-2006-2369  
Description
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-15  
Modified Date
2016-10-17  
Seq
2006-2369  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315398 61071 CVE-2006-2369 20060515 RealVNC 4.1.1 Remote Compromise  View
315399 61071 CVE-2006-2369 [vnc-list] 20060513 Version 4.1.2  View
315400 61071 CVE-2006-2369 8355  View
315401 61071 CVE-2006-2369 1016083  View
315402 61071 CVE-2006-2369 20060622 RealVNC Remote Authentication Bypass Vulnerability  View
315403 61071 CVE-2006-2369 http://www.intelliadmin.com/blog/2006/05/security-flaw-in-realvnc-411.html  View
315404 61071 CVE-2006-2369 http://www.intelliadmin.com/blog/2006/05/vnc-flaw-proof-of-concept.html  View
315405 61071 CVE-2006-2369 VU#117929  View
315406 61071 CVE-2006-2369 http://www.realvnc.com/products/free/4.1/release-notes.html  View
315407 61071 CVE-2006-2369 20060515 RealVNC 4.1.1 Remote Compromise  View
315408 61071 CVE-2006-2369 20060515 Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise  View
315409 61071 CVE-2006-2369 20060516 re: RealVNC 4.1.1 Remote Compromise  View
315410 61071 CVE-2006-2369 20060518 RE: [Full-disclosure] RealVNC 4.1.1 Remote Compromise  View
315411 61071 CVE-2006-2369 20060520 Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise  View
315412 61071 CVE-2006-2369 20060623 Linux VNC evil client patch - BID 17978  View
315413 61071 CVE-2006-2369 20060624 Re: Linux VNC evil client patch - BID 17978  View
315414 61071 CVE-2006-2369 17978  View
315415 61071 CVE-2006-2369 ADV-2006-1790  View
315416 61071 CVE-2006-2369 ADV-2006-1821  View
315417 61071 CVE-2006-2369 ADV-2006-2492  View
315418 61071 CVE-2006-2369 realvnc-auth-bypass(26445)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58699 JVNDB-2006-000964 RealVNC Server に認証回避が可能な脆弱性 遠隔操作ソフトである RealVNC Server には、クライアント認証の回避が可能な脆弱性が存在します。 CVE-2006-2369 18471 CVE-2006-2369 61071 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000964.html 2006-05-17 2008-11-21 View