CVE-2006-2450
- State
- Published
- Severity
- Not scored
- Published
- Jul 14, 2006
- Updated
- Aug 7, 2024
- Reserved
- May 18, 2006
Description
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SA:2006:042vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824
- 24525third-party-advisory
- ADV-2006-2797vdb-entry
- 21349third-party-advisory
- GLSA-200608-05vendor-advisory
- GLSA-200703-19vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584
- 20940third-party-advisory
- 21393third-party-advisory
- GLSA-200608-12vendor-advisory
- 21405third-party-advisory
- 18977vdb-entry
- http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u
- 21179third-party-advisory
- 20060811 Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer codemailing-list
- 20220513 some details regarding CVE-2022-24422 / iDRAC VNC authenticationmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.