In mprivacy-tools prior to 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
m-privacy mprivacy-tools |
||
m-privacy tightgatevnc |
Vulmon