Description
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
References
- 17824 vdb-entry
- ultr@vnc-mslogon-weak-encryption(26283) vdb-entry
- 20060502 Vulnerability in the way Ultr@VNC-1.0.1 handles MS-Logon Authentication. mailing-list