CVE-2006-2369

2006-05-1500:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.972

Percentile

99.8%

JSON

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and
Cisco CallManager, allows remote attackers to bypass authentication via a
request in which the client specifies an insecure security type such as
“Type 1 - None”, which is accepted even if it is not offered by the server,
as originally demonstrated using a long password.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchvnc4< 4.1.1+xorg1.0.2-0ubuntu1.6.06UNKNOWN
ubuntu6.10noarchvnc4< 4.1.1+xorg1.0.2-0ubuntu1.6.10.1UNKNOWN
ubuntu7.04noarchvnc4< 4.1.1+xorg1.0.2-0ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	vnc4	< 4.1.1+xorg1.0.2-0ubuntu1.6.06	UNKNOWN
ubuntu	6.10	noarch	vnc4	< 4.1.1+xorg1.0.2-0ubuntu1.6.10.1	UNKNOWN
ubuntu	7.04	noarch	vnc4	< 4.1.1+xorg1.0.2-0ubuntu4	UNKNOWN