Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

FileTransfer : a non-logged user can access system drives !

Post Reply
UltraSam
Admin & Developer
Admin & Developer
Posts: 462
Joined: 2004-04-26 20:55
Contact:

FileTransfer : a non-logged user can access system drives !

Post by UltraSam »

That's right. A user that connects to the server and that is not logged in windows (then not Windows-authentified) can still access the server file system with full read/write access...

That's why we've added the possibility to forbid the FileTransfer in the WinVNC property page: "Enable File Transfer" option.

1. By default, always disable the FileTransfer
2. When you connect with UltraVNC viewer, login Windows then go to WinVNC properties and Enable FileTransfer (if you plan to do some FT, of course...)
3. Before disconnecting Ultr@VNC, first Disable FileTransfer again.

Note: in this case, it is recommended to use the "When last client disconnects - Logoff Worstation" option. This way you don't have to think about Loggoff before disconnecting.
UltraSam
Post Reply