NEW Release Candidates!

scovel · Post by **scovel** » 2005-08-21 15:19

There are new Release Candidates for the MSRC4, ARC4, and AESV2 plugins on the Beta page.

http://msrc4plugin.home.comcast.net/beta.html

Please test and give me feedback ASAP. These will most likely be released as production-ready very soon.

The AES plugin has been discontinued in favor of the AESV2 plugin.

The MSRC4 "Reg" may also be discontinued since I can't see any advantage to it anymore.

The MSRC4 plugin changes are important and need to be tested. A "low" priority vulnerability was reported against the plugin on this website:

http://www.networkscanning.com/UltraVNC ... 19289.html

It is my opinion that it would be nearly impossible to "exploit" this flaw, but since it was already mitigated in the 119 RC4 beta I want to get this new version out soon.

Sean

redge · Post by **redge** » 2005-08-21 19:19

config
LAN: viewer LAN 100 Mbit/s <---> server WLAN 54Mbit/s
OS: XP Home act as server
Os: XP Professional act as viewer
server: winvnc 1.0.1 service system (buil date aug 6 2005) + dsmplugin
viewer: vncviewer 1.0.1 (buil date aug 6 2005) +dsmplugin
authentication: VNC password + MS Logon authentication

test based on VNC password hash without key normal and reverse
AESV2Plugin100RC1 --> successfull
ARC4Plugin100RC1 --> successfull

test based on rc4.key normal and reverse
MSRC4Plugin119RC5 --> successfull

test based on arc4.key normal and reverse
ARC4Plugin100RC1 --> fail
ask vnc password hasch
key arc4.key found but not used !

renamed and copy new_arc4.key --> arc.key to local and remote computer
C:\Windows\SYSTEM32\new_arc4.key --> C:\Program Files\UltraVNC\arc.key

scovel · Post by **scovel** » 2005-08-21 20:29

Redge,

Thanks for the feedback!

Guess I should mention somewhere that you need to rename the key files from new_*.key to *.key.

Not sure the result of your test though. Were they all successful after you renamed the key? If not, can you send me some logs?

To see if the plugin finds the key go into the Config dialog. It will show you if it found the key file or not.

Sean

redge · Post by **redge** » 2005-08-21 21:27

Winvnc 1.0.1 service system (aug 6 2005) + dsmplugin

I found something interesting for everyone

after re-input VNC password for winvnc service system,
it work fine for all dmsplugin

the most nice news,
Now possible to enable or disable and change dynamically dsmplugin without closing winvnc for validate change, very good

Thank you Sean for the great work.

redge · Post by **redge** » 2005-08-21 22:12

Guess I should mention somewhere that you need to rename the key files from new_*.key to *.key.

great idea

to button config dialog ARC4 Plugin Configuration shown:

Click on the "GenKey" button to generate a random ARC4 key.
NT then read variable %SystemRoot%\system32
9x then read variable %SystemRoot%\system
etc...

Not sure the result of your test though. Were they all successful after you renamed the key? If not, can you send me some logs?

To see if the plugin finds the key go into the Config dialog. It will show you if it found the key file or not.

tested with ARC4.key to C:\Program Files\UltraVNC
ARC4plugin100rc1 dialog shown key is found
but arc4.key not used, I was send log redge_arc4rc1.zip to your e-mail

thank you for the attention.