PT-2006-3333 · Adder+2 · Adderlink Ip+2

Dane Bouchie + 1 · Published 2006-05-15 · Updated 2024-09-05 · CVE-2006-2369

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RealVNC version 4.1.1 AdderLink IP (affected versions not specified) Cisco CallManager (affected versions not specified)

Description The issue allows remote attackers to bypass authentication by specifying an insecure security type, such as Type 1 - None, in a request, which is accepted even if it is not offered by the server. This can be achieved by using a long password.

Recommendations For RealVNC version 4.1.1, update to a version that does not accept insecure security types. For AdderLink IP, restrict access to the VNC server until a fix is available. For Cisco CallManager, consider disabling VNC access until the issue is resolved. As a temporary workaround, consider configuring the server to only offer secure security types.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2006-2369

Affected Products

Adderlink Ip

Cisco Callmanager

Realvnc

References · 37

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vnc/vnc_none_auth.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/vnc/realvnc_41_bypass.rb · Exploit
• 🔥 http://securityfocus.com/bid/17978 · Exploit
• 🔥 https://exploit-db.com/exploits/36932 · Exploit
• 🔥 http://securitytracker.com/id?1016083 · Exploit
• 🔥 http://intelliadmin.com/blog/2006/05/vnc-flaw-proof-of-concept.html · Exploit
• 🔥 https://exploit-db.com/exploits/1791 · Exploit
• 🔥 https://exploit-db.com/exploits/1794 · Exploit
• 🔥 https://exploit-db.com/exploits/17719 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2369 · Security Note
• http://realvnc.com/products/free/4.1/release-notes.html · Patch
• http://vupen.com/english/advisories/2006/2492 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sr-20060622-cmm.shtml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-2369 · Vendor Advisory
• http://secunia.com/advisories/20109 · Vendor Advisory