RE: vnc server

[<Steveb () tshore com>]

I would use http://www.vncscan.com to deploy VNC using the UltraVNC
encryption plug-in if I where you.  It acts the same as an SSH tunnel
except that you don't need to install an SSH server on every PC.

- Steve 

-----Original Message-----
From: ilaiy [mailto:ilaiy.e () gmail com] 
Sent: Monday, January 23, 2006 4:42 PM
To: jared () lewiscommunications com
Cc: security-basics () securityfocus com
Subject: Re: vnc server

VNC sessions are not encryted.

Try tunneling the traffic through a ssh session or a VPN connection and
you should be good.

./thanks
ilaiy

On 1/22/06, Jared Lyvers <jared () lewiscommunications com> wrote:
> First off, sorry Simon.  I ment to send this to the list but sent it 
> to only you instead.
>
> Now, on to my real question.
>
> I'm looking to use VNC on my windows machine for remote logins.  
> Currently I only have the following open ports:
>
> 25/tcp   open   smtp
> 80/tcp   open   http
> 113/tcp  closed auth
> 1352/tcp open   lotusnotes
> 5902/tcp open   vnc-2
> 5903/tcp open   vnc-3
> 8080/tcp open   http-proxy
>
> Are there any security problems that I may be over looking by using 
> VNC on my machine?
>
> Regards,
>
> JL
>
> --
>
> // Jared Lyvers
> // -----------------------
> // Director of Interactive
> // Director of IT
> // LPI Certified
> // -----------------------
> // www.lewiscommunications.com
>
>
> ----------------------------------------------------------------------
> ----- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The 
> Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting
experience.
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business Continuity 
> Planning, Computer Emergency Response Teams, and Digital
Investigations.
> http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------
> -----

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------