Weak Encryption in MS-Logon Authentication of UltraVNC by UltraVNC Software, Inc.
CVE-2006-2206
Currently unrated
What is CVE-2006-2206?
The MS-Logon authentication scheme in UltraVNC 1.0.1 employs weak XOR encryption for challenge/response communications. This flaw enables remote attackers to intercept and decrypt sensitive passwords, potentially leading to unauthorized access and privilege escalation. Organizations using this version of UltraVNC should take immediate action to mitigate risks associated with this vulnerability.