CVE-2008-5001

概要

参考情報

• forum.ultravnc.info/viewtopic.php · Vendor Advisory
• secunia.com/advisories/28804 · Vendor Advisory
• sourceforge.net/project/shownotes.php
• ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp
• securityfocus.com/bid/27687
• vupen.com/english/advisories/2008/0486

ultravnc のその他の脆弱性

• CVE-2010-5248中 6.9Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the cur…
• CVE-2009-0388緊急 10.0Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv…
• CVE-2008-0610緊急 9.3Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul…
• CVE-2006-2206緊急 10.0The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote a…