Test Kennung:	1.3.6.1.4.1.25623.1.0.57253
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: x11vnc
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: x11vnc CVE-2006-2450 auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as 'Type 1 - None', which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2450 18977 http://www.securityfocus.com/bid/18977 20060811 Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code http://www.securityfocus.com/archive/1/442986/100/0/threaded 20220513 some details regarding CVE-2022-24422 / iDRAC VNC authentication http://seclists.org/fulldisclosure/2022/May/29 20940 http://secunia.com/advisories/20940 21179 http://secunia.com/advisories/21179 21349 http://secunia.com/advisories/21349 21393 http://secunia.com/advisories/21393 21405 http://secunia.com/advisories/21405 24525 http://secunia.com/advisories/24525 ADV-2006-2797 http://www.vupen.com/english/advisories/2006/2797 GLSA-200608-05 http://security.gentoo.org/glsa/glsa-200608-05.xml GLSA-200608-12 http://security.gentoo.org/glsa/glsa-200608-12.xml GLSA-200703-19 http://security.gentoo.org/glsa/glsa-200703-19.xml SUSE-SA:2006:042 http://www.novell.com/linux/security/advisories/2006_42_kernel.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824 http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.