The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote malicious users to gain privileges by sniffing and decrypting passwords.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ultravnc ultravnc 1.0.1 |
Vulmon