CVE-2006-2206
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, w
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
HIGH · CVSS 10
EPSS 0.00775
Act now
- Public exploit or PoC is available
- CVSS base score ≥ 7.0
Sigma rules2
YARA rules0