UltraVNC is much more flexible, free, and allows you to encrypt traffic
from client to server.
-Spyro
-----Original Message-----
From: phunked up! [mailto:phunkodelic@gmail.com]
Sent: Tuesday, January 24, 2006 7:52 AM
To: jared@lewiscommunications.com
Cc: security-basics@securityfocus.com
Subject: Re: vnc server
Yes, its unencrypted so it sends traffic in plain text. If you have a
well managed network you can run it internally behind the firewall.
NEVER run it accross the net unless you are going to encrypt it.
On 1/22/06, Jared Lyvers <jared@lewiscommunications.com> wrote:
First off, sorry Simon. I ment to send this to the list but sent it
to
only you instead.
Now, on to my real question.
I'm looking to use VNC on my windows machine for remote logins.
Currently
I only have the following open ports:
25/tcp open smtp
80/tcp open http
113/tcp closed auth
1352/tcp open lotusnotes
5902/tcp open vnc-2
5903/tcp open vnc-3
8080/tcp open http-proxy
Are there any security problems that I may be over looking by using
VNC on
my machine?
Regards,
JL
--
// Jared Lyvers
// -----------------------
// Director of Interactive
// Director of IT
// LPI Certified
// -----------------------
// www.lewiscommunications.com
------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
