It should be noted that TightVNC (as well as VNC) uses "challenge-response" mode for authentication. The improvements take the form of an encrypted password stored in the Windows registry and increased display speed on low throughput networks (when taking control via a modem, ISDN line, WAN, etc.) Furthermore, as far as setting the options goes, TightVNC is much more flexible than VNC (no need to alter the Registry with regedit or any other tool). In order to cure this first problem, IDEAL Administration and IDEAL Remotenow only use TightVNC, which is an "improved" version of VNC. Analysis of the packets exchanged between the administration machine and the administered machine ("packet sniffing"), and therefore possible retrieval of any confidential data entered via the keyboard.Īnyone in possession of the password would then be able to take control of the client machine and gain access to all its data, including confidential data.Brute force attempts at discovering the connection password.Recovery of the unencrypted connection password stored in the Windows registry.Unencrypted transmission of data between the administration machine and the administered machine.Īs a consequence, depending on the implemented security, the risks incurred from "users" with malicious intentions (call them pirates if you prefer) are:.Connections are "possible" at any moment when the VNC module installed on the client is running as a service.Unencrypted storage of the connection password in the Windows registry (older versions of VNC).In the case of VNC, the main reproaches made are: The use of a remote maintenance tool, whatever it is, carries the risk for a company of creating potential security holes. Secure and Simplify your VNC Installation with IDEAL Administration (installed in 2 minutes) Try IDEAL Administration during 30 days on your network for free! I've heard there are a lot security issues with the VNC family of products. How to configure the TightVNC remote control tool (screen sharing)? How can I make sure TightVNC is secure to use?
0 kommentar(er)
