• info
• discussion
• exploit
• solution
• references

LibVNCServer Remote Authentication Bypass Vulnerability

Solution:
The vendor has released an upstream fix to address this issue.

Please see the referenced advisories for more information.


S.u.S.E. Linux Professional 10.1

• SuSE apparmor-admin_en-10-7.5.noarch.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-admin_en-1 0-7.5.noarch.rpm


• SuSE apparmor-docs-2.0-17.5.noarch.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-docs-2.0-1 7.5.noarch.rpm


• SuSE apparmor-profiles-2.0-34.9.noarch.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-profiles-2 .0-34.9.noarch.rpm


• SuSE apparmor-utils-2.0-23.5.noarch.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-utils-2.0- 23.5.noarch.rpm


• SuSE yast2-apparmor-2.0-27.5.noarch.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/yast2-apparmor-2.0- 27.5.noarch.rpm

LibVNCServer VNC Library 0.1 beta

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.2

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.4

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.5

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.6

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.7

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u

LibVNCServer VNC Library 0.7.1

• LibVNCServer Diff of /libvncserver/libvncserver/auth.c
  http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libv ncserver/auth.c?r1=1.11&r2=1.14&diff_format=u