Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

DSM (without key) and MSLOGON in 1.0.5

Should you have problems with the DSM plugin, here's the place to look for help or report issues
Post Reply
pcperfect
Posts: 2
Joined: 2009-02-05 16:42

DSM (without key) and MSLOGON in 1.0.5

Post by pcperfect »

I have just set up an 1.0.5 install, but i can't get DSM and MSLOGON to work (both MSLOGON I or II).

When i only configure MSLOGON, i can connect. If i then configure DSM without a keyfile (but using password) and try to connect i only get a password box for the DSM.

Enter incorrect DSM password = DSM error (invalid protocol)
Enter correct DSM password = Connection rejected

This proves that the DSM part is working.

Also with mslogon debug enabled there is a failed attempt logged without any user info (logical since it never asked for a user/pass): Invalid attempt (not authenticated) from client x.x.x.x using account
(notice the double space between using and account)

Is this still posible with 1.0.5? had it working with 1.0.2 and was used to first get a password box for DSM and then a user/pass box for mslogon. Yes i know this is double but i don't care. I like it :)
Last edited by pcperfect on 2009-02-06 12:27, edited 3 times in total.
YY
200
200
Posts: 996
Joined: 2006-11-13 15:11

Re: DSM (without key) and MSLOGON in 1.05

Post by YY »

pcperfect wrote:Is this still posible with 1.05? had it working with 1.02 and was used to first get a password box for DSM and then a user/pass box for mslogon. Yes i know this is double but i don't care. I like it :)
I try the 1.0.2 viewer to connect to a 1.0.5 server.
YES, it still can work exactly as what you said.

I never realise the 1.0.2 can work in such way. :surprise:
pcperfect
Posts: 2
Joined: 2009-02-05 16:42

Re: DSM (without key) and MSLOGON in 1.05

Post by pcperfect »

Hmm never tried to connect with the 1.0.2 viewer, i'll try that when i have the chance.
So it's actually a viewer problem then? But is it smart to use the 1.0.2 viewer with 1.0.5 server seeing the security issues ?
Would there be some code missing in the 1.0.5 viewer ?
Last edited by pcperfect on 2009-02-06 12:25, edited 2 times in total.
YY
200
200
Posts: 996
Joined: 2006-11-13 15:11

Re: DSM (without key) and MSLOGON in 1.0.5

Post by YY »

I'm not a qualified person to provide the answer.

In my memory, there are one or two serious vulnerabilities found on vncviewer 1.0.2, the most recent reported one is [topic=14654]here[/topic]

However, the vulnerabilities only exists when viewer running on listening mode. If you don't use it in such way, I suppose it is still safe.
Post Reply