CVE-2006-2369

Exp

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password.

Published: 2006-05-15 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-2369 is rated High Exploit Risk (79.7/100): CVSS High severity, with high exploitation likelihood (EPSS 92.34%, 100th percentile). Core evidence: 7 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2006-2369

EDB-ID Source Kind Published Link
36932 exploit_db edb 2012-05-13 Exploit-DB ↗
17719 exploit_db edb 2011-08-26 Exploit-DB ↗
1791 exploit_db edb 2006-05-16 Exploit-DB ↗
1794 exploit_db edb 2006-05-15 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2006-2369

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-24 92.50% 92.34% -0.16%
2 2026-03-21 91.14% 92.50% +1.35%
3 2026-01-27 91.14%

Full EPSS history (20 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-2369

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 6.4 [email protected]

Weakness enumeration for CVE-2006-2369

OS Trackers for CVE-2006-2369

vendor priority summary link
redhat https://access.redhat.com/security/cve/CVE-2006-2369
ubuntu medium CVE-2006-2369 medium priority: Ubuntu including 1 source packages (vnc4), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2006-2369

Vendor comments (NVD) for CVE-2006-2369

  • Red Hat (2006-08-16T00:00:00)

    This issue only affected version 4.1.1 and not the versions distributed with Red Hat Enterprise Linux 2.1, 3, or 4.

Affected software / configurations for CVE-2006-2369

Vendor Product Version Raw CPE
vnc realvnc 4.1.1 cpe:2.3:a:vnc:realvnc:4.1.1:*:*:*:*:*:*:*

References for CVE-2006-2369

URL Tags
http://marc.info/?l=full-disclosure&m=114768344111131&w=2
http://marc.info/?l=vnc-list&m=114755444130188&w=2
http://seclists.org/fulldisclosure/2022/May/29
http://secunia.com/advisories/20107 Patch Vendor Advisory
http://secunia.com/advisories/20109 Patch Vendor Advisory
http://secunia.com/advisories/20789 Vendor Advisory
http://securityreason.com/securityalert/8355
http://securitytracker.com/id?1016083 Exploit Patch
http://www.cisco.com/warp/public/707/cisco-sr-20060622-cmm.shtml
http://www.intelliadmin.com/blog/2006/05/security-flaw-in-realvnc-411.html
http://www.intelliadmin.com/blog/2006/05/vnc-flaw-proof-of-concept.html Exploit Patch
http://www.kb.cert.org/vuls/id/117929 Patch Third Party Advisory US Government Resource
http://www.osvdb.org/25479
http://www.realvnc.com/products/free/4.1/release-notes.html Patch
http://www.securityfocus.com/archive/1/433994/100/0/threaded
http://www.securityfocus.com/archive/1/434015/100/0/threaded
http://www.securityfocus.com/archive/1/434117/100/0/threaded
http://www.securityfocus.com/archive/1/434518/100/0/threaded
http://www.securityfocus.com/archive/1/434560/100/0/threaded
http://www.securityfocus.com/archive/1/438175/100/0/threaded
http://www.securityfocus.com/archive/1/438368/100/0/threaded
http://www.securityfocus.com/bid/17978 Exploit Patch
http://www.vupen.com/english/advisories/2006/1790 Vendor Advisory
http://www.vupen.com/english/advisories/2006/1821 Vendor Advisory
http://www.vupen.com/english/advisories/2006/2492 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26445
http://www.openwall.com/lists/oss-security/2024/08/02/8
cvelogic Threat Intelligence