libvncserver: authentication bypass
| Package(s): | libvncserver | CVE #(s): | CVE-2006-2450 | ||||||||||||
| Created: | August 4, 2006 | Updated: | March 19, 2007 | ||||||||||||
| Description: | LibVNCServer fails to properly validate protocol types effectively letting users decide what protocol to use, such as "Type 1 - None". LibVNCServer will accept this security type, even if it is not offered by the server. | ||||||||||||||
| Alerts: |
| ||||||||||||||