NVD

Id
61149  
Name
CVE-2006-2450  
Description
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2014-11-11  
Seq
2006-2450  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316010 61149 CVE-2006-2450 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824  View
316011 61149 CVE-2006-2450 http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u  View
316012 61149 CVE-2006-2450 GLSA-200608-05  View
316013 61149 CVE-2006-2450 GLSA-200608-12  View
316014 61149 CVE-2006-2450 GLSA-200703-19  View
316015 61149 CVE-2006-2450 http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584  View
316016 61149 CVE-2006-2450 SUSE-SA:2006:042  View
316017 61149 CVE-2006-2450 20060811 Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code  View
316018 61149 CVE-2006-2450 18977  View
316019 61149 CVE-2006-2450 ADV-2006-2797  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60454 JVNDB-2006-002720 LibVNCServer の auth.c における認証を回避される脆弱性 LibVNCServer の auth.c は、サーバーから提供されていない場合でも承認する不備があるため、認証を回避される脆弱性が存在します。 CVE-2006-2450 18552 CVE-2006-2450 61149 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002720.html 2006-07-18 2012-12-20 View