"Class101",
VNC has always provided the option to operate without requiring
authentication, there is no such thing as a "RealVNC4 NULL Session", and VNC
has never used SSL encryption, so I'm afraid it sounds like someone's been
telling you porkies!
The output that you've included just seems to sh
@ RealVNC Ltd.
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: 20 June 2005 15:07
> To: James Weatherall
> Cc: vnc-list@realvnc.com; 'Full-Disclosure'
> Subject: Re: RealVNC/WinVNC Multiple vulnerabilities
>
> -BEGIN PGP
ssage-----
> From: class [mailto:[EMAIL PROTECTED]
> Sent: 20 June 2005 15:58
> Cc: James Weatherall; vnc-list@realvnc.com; 'Full-Disclosure'
> Subject: Re: RealVNC/WinVNC Multiple vulnerabilities
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> >
NC Ltd.
> -Original Message-
> From: class [mailto:[EMAIL PROTECTED]
> Sent: 20 June 2005 16:34
> To: James Weatherall
> Cc: vnc-list@realvnc.com; 'Full-Disclosure'
> Subject: Re: RealVNC/WinVNC Multiple vulnerabilities
>
> -BEGIN PGP SIGNED MESSA
