CVE Feed

    Dashboard / CVE / CVE-2006-2450

    CVE-2006-2450

    auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.

    Published:Jul 14, 2006
    Last Modified:Apr 16, 2026
    EPS:Jul 14, 2006
    EPSS Score:0.03222
    CVSS Score:7.5

    Affected Products

    Vendor
    Libvncserver
    Product
    Libvncserver

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-50538 (CVSS 8.8) — LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malici…
    CVE-2026-44988 (CVSS 8.8) — LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight…
    CVE-2026-32854 (CVSS 6.3) — LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilit…
    CVE-2026-32853 (CVSS 6.9) — LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerabili…
    CVE-2014-6051 (CVSS 7.5) — Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows rem…
    CVE-2014-6054 (CVSS 4.3) — The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allow…
    CVE-2014-6052 (CVSS 7.5) — The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not chec…
    CVE-2014-6053 (CVSS 5) — The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does …
    CVE-2014-6055 (CVSS 6.5) — Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and ea…

    References

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824
    http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u
    http://seclists.org/fulldisclosure/2022/May/29
    http://secunia.com/advisories/20940
    http://secunia.com/advisories/21179
    http://secunia.com/advisories/21349
    http://secunia.com/advisories/21393
    http://secunia.com/advisories/21405
    http://secunia.com/advisories/24525
    http://security.gentoo.org/glsa/glsa-200608-05.xml
    http://security.gentoo.org/glsa/glsa-200608-12.xml
    http://security.gentoo.org/glsa/glsa-200703-19.xml
    http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584
    http://www.novell.com/linux/security/advisories/2006_42_kernel.html
    http://www.securityfocus.com/archive/1/442986/100/0/threaded
    http://www.securityfocus.com/bid/18977
    http://www.vupen.com/english/advisories/2006/2797
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824
    http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u
    http://seclists.org/fulldisclosure/2022/May/29
    http://secunia.com/advisories/20940
    http://secunia.com/advisories/21179
    http://secunia.com/advisories/21349
    http://secunia.com/advisories/21393
    http://secunia.com/advisories/21405
    http://secunia.com/advisories/24525
    http://security.gentoo.org/glsa/glsa-200608-05.xml
    http://security.gentoo.org/glsa/glsa-200608-12.xml
    http://security.gentoo.org/glsa/glsa-200703-19.xml
    http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584
    http://www.novell.com/linux/security/advisories/2006_42_kernel.html
    http://www.securityfocus.com/archive/1/442986/100/0/threaded
    http://www.securityfocus.com/bid/18977
    http://www.vupen.com/english/advisories/2006/2797

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High