CVE-2006-1652
CVE-2006-1652
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint.
Affected products
n/a · n/apublic PoCs found — 5
cve_referencewww.exploit-db.com/exploits/1642unverifiedcve_referencewww.exploit-db.com/exploits/1643unverifiedexploitdbwww.exploit-db.com/exploits/16490unverifiedexploitdbwww.exploit-db.com/exploits/27568unverifiedexploitdbwww.exploit-db.com/exploits/27569unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.htmlhttp://secunia.com/advisories/19513http://securityreason.com/securityalert/674https://exchange.xforce.ibmcloud.com/vulnerabilities/25648https://exchange.xforce.ibmcloud.com/vulnerabilities/25650https://www.exploit-db.com/exploits/1642https://www.exploit-db.com/exploits/1643http://www.securityfocus.com/archive/1/429930/100/0/threadedhttp://www.securityfocus.com/archive/1/430287/100/0/threadedhttp://www.securityfocus.com/archive/1/430711/100/0/threadedhttp://www.securityfocus.com/bid/17378http://www.vupen.com/english/advisories/2006/1240