Celebrating the 22th anniversary of the UltraVNC: https://forum.uvnc.com/viewtopic.php?t=38031
Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: https://forum.uvnc.com/viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Bluesky/AT Protocol: https://bsky.app/profile/ultravnc.bsky.social
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Security issue with downloadable U-VNC SC executable

Post Reply
grog
Posts: 2
Joined: 2008-11-18 00:23

Security issue with downloadable U-VNC SC executable

Post by grog »

Hello forum !

We very thankfully use Ultra VNC SC, using an unique rc4Key as well as the MSRC4Plugin.dsm.

A Customer/friend asking for support can download the SC-executable from our website using a simple http Link anytime. That way help is easily accessible for the ones needing it.

However:
As the executable SC file is openly accessible by anyone who knows or finds the Download Link, my question:
1. Is this dangerous and a security issue ?
2. Can someone who downloads the SC executable (where the rc4 key is integrated) intercept an ongoing connection between me and a client ?

3. And if it makes the connections interceptable, what simple alternative would you propose ?

Thank you, :roll:

.
Last edited by grog on 2008-11-18 09:55, edited 4 times in total.
grog
Posts: 2
Joined: 2008-11-18 00:23

Re: Security issue with downloadable U-VNC SC executable

Post by grog »

Hey, hows it hanging ?

Do not tell me nobody knows an answer ?? :P
X3
100
100
Posts: 280
Joined: 2007-12-11 08:50
Location: 51.30 N 0.10 W
Contact:

Re: Security issue with downloadable U-VNC SC executable

Post by X3 »

erm once you download once and browser/download page closed no one can find that link unless hacked your computer and vieweing history/cache

not sure if link stays live forever I dont think so but I may be wrong.
Regards

Image
Post Reply