Security and VNC Ports

BillInt2000 · Post by **BillInt2000** » 2005-09-16 20:53

Excuse this if it seems to be a dumb question, but is UltraVNC and the ports that are opened for it easily exploitable? In your (whoever might wish to answer) opinion, is leaving UltraVNC running as a service kind of leaving a gaping hole in the networks security???
(Im speaking of this as if it were being used by someone connecting from home as opposed to within the LAN)

thx

Post by **Rudi De Vos** » 2005-09-16 21:26

The pasword is to weak, for internet use and permanent running server
you need to use an encryption plugin.

sbest · Post by **sbest** » 2005-09-16 21:48

Bill:

Heya. Not a dumb question at all. Here's how to think about it: an open-port, by itself, isn't dangerous. What's dangerous is the stability of the software *listening* to network traffic on that port. All the encryption in the world won't help against attacks on a poorly written application listening on an open port.

Fortunately, and to answer your question, VNC has no known exploits that cause it to be a liability when listening to an open port. EchoVNC can enable VNC connections without any open ports, if it's still something you're unsure about.

cheers,
Scott