CVE-2006-2206 | BDVDB-2026-16717 Detail

Description#

The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/17824
https://exchange.xforce.ibmcloud.com/vulnerabilities/26283
http://archives.neohapsis.com/archives/bugtraq/2006-05/0057.html

Exploit#

No public exploit known

History#

Version 12006-05-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.