Package: directvnc
Version: 0.7.8-1
Severity: normal

man 1 directvnc:

       -p, --password
            password string to be passed to the server for authentication. Use 
this with care!

OK, so what's care?  Well, the password is available for all system
users and crackers to view with just `ps faux | grep directvnc`.  But
what if there was a way to supply the password through a file, like on
all other vnc servers?  Looking at the documentation, I can't see any
such way to provide the password through a file.



-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable'), (5, 'testing'), (2, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.5.0-0.deb12.4-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages directvnc depends on:
ii  libc6                 2.36-9+deb12u4
ii  libdirectfb-1.7-7     1.7.7-11
pn  libdirectfb-1.7-7t64  <none>
ii  libjpeg62-turbo       1:2.1.5-2
ii  zlib1g                1:1.2.13.dfsg-1

Versions of packages directvnc recommends:
ii  x11proto-core-dev                 2022.1-1
ii  x11proto-dev [x11proto-core-dev]  2022.1-1

directvnc suggests no packages.

Reply via email to