VNC: UltraVNC Client Authentication Overflow
This signature detects attempts to exploit a known vulnerability against UltraVNC client. Versions 1.1 and below are vulnerable. Attackers can run arbitrary code with the privileges of the VNC client user, typically "Administrator." This exploit requires a vulnerable client to connect to a hostile VNC server.
Extended Description
UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to insufficiently sized memory buffers. A successful attack may allow remote attackers to execute arbitrary code on a vulnerable computer to gain unauthorized access in the context of the application.
Affected Products
Ultravnc ultr@vnc
Short Name
VNC:ULTRAVNC-CLIENT-AUTH-OF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
VNC
Keywords
Authentication CVE-2006-1652 Client Overflow UltraVNC bid:17378
Release Date
06/01/2006
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3564
False Positive
Unknown
Vendors
Ultravnc
CVSS Score
9.0