>> LibVNCServer "auth.c" Remote Authentication Bypass and Unauthorized Access Vulnerability
Title : LibVNCServer "auth.c" Remote Authentication Bypass and Unauthorized Access Vulnerability VUPEN ID : VUPEN/ADV-2006-2797 CVE ID : CVE-2006-2450
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-07-14
Technical Description
A vulnerability has been identified in LibVNCServer, which could be exploited by remote attackers to compromise a vulnerable system. This flaw is due to an error in the authentication process "auth.c", which could be exploited by remote unauthenticated attackers to gain unauthorized access to a vulnerable system via a specially crafted request.