VNC: Server Cut Text Overflow

This protocol anomaly is a VNC server message with cut text that exceeds the user-defined maximum. The default cut text length is 4096; you can change this setting in the Sensor Settings Rulebase>Protocol Thresholds and Configuration>VNC>Cut text length.

Extended Description

Some VNC implementations may be vulnerable in how they process such unusual exception conditions, especially an Authentication Status message that is too long. The security flaws in these products may be exploited for denial of service or other attacks.

References

URL: http://www.realvnc.com/docs/rfbproto.pdf

Short Name

VNC:ERR:SVR-CUT-OVERFLOW

Severity

Major

Recommended

False

Recommended Action

None

VNC: Server Cut Text Overflow

Extended Description

References

Found a potential security threat?