TightVNC Win32 Server QueryAllowNoPass Access Control Bypass Vulnerability

Bugtraq ID:	8347
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 05 2003 12:00AM
Updated:	Aug 05 2003 12:00AM
Credit:	Discovery of this issue is credited to Olaf Hahn <[email protected]>.
Vulnerable:	TightVNC TightVNC 1.2.7 TightVNC TightVNC 1.2.6 TightVNC TightVNC 1.2.5 + Mandriva Linux Mandrake 9.0 TightVNC TightVNC 1.2.4 TightVNC TightVNC 1.2.3 TightVNC TightVNC 1.2.2 TightVNC TightVNC 1.2.1 TightVNC TightVNC 1.2 .0
Not Vulnerable:	TightVNC TightVNC 1.2.9

TightVNC Win32 Server QueryAllowNoPass Access Control Bypass Vulnerability

Solution:
It is reported that this issue is addressed in TightVNC 1.2.9 for Windows platforms.


TightVNC TightVNC 1.2 .0

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.1

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.2

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.3

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.4

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.5

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.6

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC TightVNC 1.2.7

• TightVNC TightVNC 1.2.9 (Win32)
  http://www.tightvnc.com/download.html

TightVNC Win32 Server QueryAllowNoPass Access Control Bypass Vulnerability

References:

• TightVNC Homepage (TightVNC)