| Package | Affected versions | Patched versions |
|---|---|---|
| ultravnc | = 1.0.1 |
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free