UltraVNC have vulnerability as RealVNC (US-CERT VU#117929)

Scott Copus <[email protected]> Thu, 18 May 2006 12:21:00 -0500
Newsgroups gmane.network.vnc.ultravnc.general
Message-ID <[email protected]>
For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/

Does anyone know if UltraVNC has the same vulnerability as US-CERT 
advises for RealVNC?  see link below.

US-CERT VU#117929:
RealVNC Server does not validate client authentication method
http://www.kb.cert.org/vuls/id/117929

Does anyone have proof of concept code for me to test vulnerability on 
my systems with UltraVNC installed?

thanks,
Scott



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642