Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

MSRC4Plugin 1.2.0 and 1.2.1 are NG

Should you have problems with the DSM plugin, here's the place to look for help or report issues
Post Reply
scovel
100
100
Posts: 307
Joined: 2004-07-12 11:56
Location: CT, USA
Contact:

MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by scovel »

MSRC4Plugin 1.2.0 and 1.2.1 are no good, at least on Windows 2000. The fix is not going to be quick. Either revert to 1.1.8, or switch to one of the OpenSSL based plugins. The ARC4 plugin is also RC4 based encryption. The AESV2 version is even MORE SECURE.

Hopefully I'll find the bug in the next week.

Sean
Last edited by scovel on 2009-07-01 20:22, edited 2 times in total.
User avatar
averkiev
40
40
Posts: 121
Joined: 2005-06-12 06:40
Location: Singapore
Contact:

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by averkiev »

Sean,
while reviewing the source code for MSRC4 v1.2.1 plug-in, I found quite a few places in the code that doesn't look good and error prone.

Like when you declare a buffer of char[256] for key file name. Have you tried to check what gonna happen when the file path is longer than that?

You are welcome to ping me via MSN at averkiev_y@hotmail.com so I could help you to improve the code.

Regards,
Yury
Last edited by averkiev on 2006-07-14 10:11, edited 4 times in total.
scovel
100
100
Posts: 307
Joined: 2004-07-12 11:56
Location: CT, USA
Contact:

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by scovel »

Yury,

That's not a very friendly way to start a conversation! :o

Have YOU looked at what will happen? At worst the filename will get truncated.

If you have other concerns or patches you'd like to submit, feel free to Email me directly.

Sean
User avatar
averkiev
40
40
Posts: 121
Joined: 2005-06-12 06:40
Location: Singapore
Contact:

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by averkiev »

Hi Sean,
sorry I don't meant to be rude.

I've sent you a PM with some other problems outlined.

Yury
Astro
Posts: 1
Joined: 2006-08-08 07:42

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by Astro »

Hello,

I am new with ultravnc and MSR4Plugin.

Until yesterday I used UltraVNC V1.0.1 and MSRC4Plugin v1.1.8
UVNCViewer on Win 2K Pro <--> UVNCServer on Win XP Pro ---> [OK]
UVNCViewer on Win XP Pro <--> UVNCServer on Win XP Pro ---> [OK]
Now I use UltraVNC V1.0.2 and MSRC4Plugin v1.2.1:
UVNCViewer on Win 2K Pro <--> UVNCServer on Win XP Pro ---> [NOK]
UVNCViewer on Win XP Pro <--> UVNCServer on Win XP Pro ---> [OK]
So I can confirm that under windows 2000, the latest MSRC4Plugin doesn't
work correctly!

Regards,
Asto

Under the MSRC4Plugin download website, the "whatsnew.txt" file into
the zip Archive from the last version (1.2.1) is not up2date! It contains the news info from the v1.1.8...
scovel
100
100
Posts: 307
Joined: 2004-07-12 11:56
Location: CT, USA
Contact:

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by scovel »

There is a new BETA, 1.2.2. RC1, that I hope fixes the problem on Windows 2000. If you try it out, let me know how your testing goes, and what OS you tested on.

Sean


[topic=7420][/topic]
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by redge »

There a final build, please upgrade to MSRC4Plugin 1.2.2.0
[topic=7441][/topic]
Last edited by redge on 2006-08-16 23:54, edited 1 time in total.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Re: MSRC4Plugin 1.2.0 and 1.2.1 are NG

Post by redge »

adzm wrote:salting is disabled in the MSRC4 plugin due to Windows 2000 incompatibility
Is it really Salting issue or only the bug of %temp% not in use by all plugin msrc4plugin ?

fixed %temp% issue with custom build of msrc4 1.4.0 by pgmoney
won't see the official msrc4plugin.dsm with temp folder fixed.

I can't check my self, actually i won't have w2k
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
Post Reply