RE: Scroll Windows problem

[Dries Feys]

Cannot exactly display the .  I think you forgot a word...

Regards



Dries Feys -- Software Engineer
TVH forklift parts -- Thermote & Vanhalst NV
Driemasten 120-126 -- B-8560 Gullegem-Belgium
E-mail: [EMAIL PROTECTED] -- URL: http://www.tvh.be
Tel: +32 (0)56 434745 -- Fax: +32 (0)56 434488

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]Namens Kousyun Bun
Verzonden: dinsdag 30 januari 2001 8:33
Aan: [EMAIL PROTECTED]
Onderwerp: Scroll Windows problem

When I  use VNC to control MS Internet Explore running on VNC Server,
I found the VNC client cannot exactly display the when I scroll the
browser window. but It's ok in the case of Notepad.

I wonder if it is a bug and if Anyone can fix this problem.
Thanks,

Kousyun bun
Jepro,Co.Inc
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-



**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.


**
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Scroll Windows problem

[Kousyun Bun]

I am Sorry for my miss, It sould be
"can not exactly display the webpage"

Regards,

Kousyun Bun,

> Cannot exactly display the .  I think you forgot a word...
> 
> Regards
> 
> 
> 
> Dries Feys -- Software Engineer
> TVH forklift parts -- Thermote & Vanhalst NV
> Driemasten 120-126 -- B-8560 Gullegem-Belgium
> E-mail: [EMAIL PROTECTED] -- URL: http://www.tvh.be
> Tel: +32 (0)56 434745 -- Fax: +32 (0)56 434488
> 
> -Oorspronkelijk bericht-
> Van: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]Namens Kousyun Bun
> Verzonden: dinsdag 30 januari 2001 8:33
> Aan: [EMAIL PROTECTED]
> Onderwerp: Scroll Windows problem
> 
> When I  use VNC to control MS Internet Explore running on VNC Server,
> I found the VNC client cannot exactly display the when I scroll the
> browser window. but It's ok in the case of Notepad.
> 
> I wonder if it is a bug and if Anyone can fix this problem.
> Thanks,
> 
> Kousyun bun
> Jepro,Co.Inc
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
> 
> 
> 
> **
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
> 
> 
> **
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: Scroll Windows problem

[Dries Feys]

Try to use "poll full screen" on the server side...

Regards,

Dries Feys -- Software Engineer
TVH forklift parts -- Thermote & Vanhalst NV
Driemasten 120-126 -- B-8560 Gullegem-Belgium
E-mail: [EMAIL PROTECTED] -- URL: http://www.tvh.be
Tel: +32 (0)56 434745 -- Fax: +32 (0)56 434488

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]Namens Kousyun Bun
Verzonden: dinsdag 30 januari 2001 9:57
Aan: [EMAIL PROTECTED]
Onderwerp: Re: Scroll Windows problem

I am Sorry for my miss, It sould be
"can not exactly display the webpage"

Regards,

Kousyun Bun,

>
> When I  use VNC to control MS Internet Explore running on VNC Server,
> I found the VNC client cannot exactly display the when I scroll the
> browser window. but It's ok in the case of Notepad.
>
> I wonder if it is a bug and if Anyone can fix this problem.
> Thanks,
>
> Kousyun bun
> Jepro,Co.Inc




**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.


**
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: Scroll Windows problem

[Gustafsson, Bjorn]

... Or uncheck "poll console windows only" in combination with having "poll
foreground window" checked (this implies that IE is in fact the foreground
window) :)

   /Bjorn

-Original Message-
From: Dries Feys [mailto:[EMAIL PROTECTED]]
Sent: den 30 januari 2001 10:06
To: [EMAIL PROTECTED]
Subject: RE: Scroll Windows problem


Try to use "poll full screen" on the server side...

Regards,

Dries Feys -- Software Engineer
TVH forklift parts -- Thermote & Vanhalst NV
Driemasten 120-126 -- B-8560 Gullegem-Belgium
E-mail: [EMAIL PROTECTED] -- URL: http://www.tvh.be
Tel: +32 (0)56 434745 -- Fax: +32 (0)56 434488

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]Namens Kousyun Bun
Verzonden: dinsdag 30 januari 2001 9:57
Aan: [EMAIL PROTECTED]
Onderwerp: Re: Scroll Windows problem

I am Sorry for my miss, It sould be
"can not exactly display the webpage"

Regards,

Kousyun Bun,

>
> When I  use VNC to control MS Internet Explore running on VNC Server,
> I found the VNC client cannot exactly display the when I scroll the
> browser window. but It's ok in the case of Notepad.
>
> I wonder if it is a bug and if Anyone can fix this problem.
> Thanks,
>
> Kousyun bun
> Jepro,Co.Inc




**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.


**
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Scroll Windows problem

[Kousyun Bun]

I can see VNC viewer correctly display when scrolling windows
with "poll full screen " checked on the server side. 

Thank you Dries Feys for your help
and Thank you Gustafsson,Bjorn for your advice.

Kousyun ,Bun
[EMAIL PROTECTED]


- Original Message - 
From: "Dries Feys" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 6:05 PM
Subject: RE: Scroll Windows problem


> Try to use "poll full screen" on the server side...
> 
> Regards,
> 
> Dries Feys -- Software Engineer
> TVH forklift parts -- Thermote & Vanhalst NV
> Driemasten 120-126 -- B-8560 Gullegem-Belgium
> E-mail: [EMAIL PROTECTED] -- URL: http://www.tvh.be
> Tel: +32 (0)56 434745 -- Fax: +32 (0)56 434488
> 
> -Oorspronkelijk bericht-
> Van: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]Namens Kousyun Bun
> Verzonden: dinsdag 30 januari 2001 9:57
> Aan: [EMAIL PROTECTED]
> Onderwerp: Re: Scroll Windows problem
> 
> I am Sorry for my miss, It sould be
> "can not exactly display the webpage"
> 
> Regards,
> 
> Kousyun Bun,
> 
> >
> > When I  use VNC to control MS Internet Explore running on VNC Server,
> > I found the VNC client cannot exactly display the when I scroll the
> > browser window. but It's ok in the case of Notepad.
> >
> > I wonder if it is a bug and if Anyone can fix this problem.
> > Thanks,
> >
> > Kousyun bun
> > Jepro,Co.Inc
> 
> 
> 
> 
> **
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
> 
> 
> **
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Setup for Solaris

[Werner Sauheitl]

Hello,
running vncserver on Win2k and connecting to my PC through a proxyserver
from outside works fine.
Which setup must be done on Solaris to run the Xvnc - Server an connect to
them over the same
proxyserver from outside?

In Win2k I have an ini-File and some entries in the regestry.
What are the settings in Solaris? Any ini-File? Any entrys in services
a.s.o?

Thanks in advance.

Werner
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

screen update

[rhenderson]

Actually a newbie question.  We still have a lot of character applications.
The screens do not update very well in the telnet sessions.  I am thinking
that it is because the default is the mouse click update is the default.
Which "Update Handing" would work the best to update what is displayed in
the telnet session?  I currently have "Poll foreground Window" and "Poll
Console Windows Only".

Thanks

Rick Henderson
Windham School District
(936) 291-5356
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: screen update

[Gustafsson, Bjorn]

Uncheck "Poll console windows only", that should take care of the telnet
window.

   /Bjorn

-Original Message-
From: rhenderson [mailto:[EMAIL PROTECTED]]
Sent: den 30 januari 2001 14:01
To: Vnc-List (E-mail)
Subject: screen update


Actually a newbie question.  We still have a lot of character applications.
The screens do not update very well in the telnet sessions.  I am thinking
that it is because the default is the mouse click update is the default.
Which "Update Handing" would work the best to update what is displayed in
the telnet session?  I currently have "Poll foreground Window" and "Poll
Console Windows Only".

Thanks

Rick Henderson
Windham School District
(936) 291-5356
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

[Fwd: [CORE SDI ADVISORY] WinVNC client buffer overflow]

[Noel Holshouser]

Just FYI

 Original Message 
Subject: [CORE SDI ADVISORY] WinVNC client buffer overflow
Date: Mon, 29 Jan 2001 19:20:28 -0300
From: Ivan Arce <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: CORE SDI
To: <[EMAIL PROTECTED]>



   CORE SDI
http://www.core-sdi.com

 Vulnerability report for buffer overflow in ATT WinVNC client



Date Published: 2001-01-29

Advisory ID: CORE-2001011503

Bugtraq ID: 2305

CVE CAN: None currently assigned.

Title; ATT VNC Windows Client Buffer Overflow

Class: Boundary Error Condition (Buffer Overflow)

Remotely Exploitable: yes

Locally Exploitable: yes

Release Mode: USER RELEASE

Vulnerability Description:

 As stated in the VNC home page ( http://www.uk.research.att.com/vnc/ ):

 "VNC stands for Virtual Network Computing. It is, in essence, a
 remote display system which allows you to view a computing 'desktop'
 environment not only on the machine where it is running, but from anywhere
 on the Internet and from a wide variety of machine architectures"

 The ATT VNC client ships with a remotely exploitable buffer overflow.
 By prodiving a specially crafted response a malicious server has the
 ability to obtain access to the client machine and execute arbitrary
 commands as the user running the client software.

 As VNC is generally used for, among other things, remote management of
 systems outside of the owners network (i.e. collocated sites) an
 attack scenario for this vulnerability is of interest since it might
 imply the escalation of an attack from a less secured network environment
 (i.e. exposed web servers on a CoLo site) to  more secured network
 environment (i.e.  an internal network or the NOC that performs remote
 administration of the CoLo site).

Vulnerable Packages/Systems:

 WinVNC up to version 3.3.3r7


Solution/Vendor Information/Workaround:

  Contact vendor for an appropriate fix.

  In the meantime apply this patch while inside the vnc_winsrc/vncviewer
  directory:

--- Log.cpp Mon Jan 15 17:51:17 2001
+++ Log.cpp Mon Jan 15 17:52:00 2001
@@ -124,7 +124,7 @@
 void Log::ReallyPrint(LPTSTR format, va_list ap)
 {
 TCHAR line[LINE_BUFFER_SIZE];
-_vstprintf(line, format, ap);
+_vsntprintf(line, sizeof(line) - sizeof(TCHAR), format, ap);
 if (m_todebug) OutputDebugString(line);

 if (m_toconsole) {
@@ -146,7 +146,7 @@
 void Log::ReallyPrint(LPTSTR format, va_list ap)
 {
 TCHAR line[LINE_BUFFER_SIZE];
-_vstprintf(line, format, ap);
+_vsntprintf(line, sizeof(line) - sizeof(TCHAR), format, ap);
 if (m_todebug) OutputDebugString(line);

 if (m_tofile && (hlogfile != NULL)) {

  This patch can also be downloaded from
  ftp://ftp.core-sdi.com/pub/patches/VNC-clientBO.patch

Vendor notified on: 2001-15-01


Credits:

 This vulnerability was found by Emiliano Kargieman, Agustin Azubel
 and Maximiliano Caceres from Core SDI, http://www.core-sdi.com

 This advisory was drafted with the help of the SecurityFocus.com
 Vulnerability Help Team. For more information or assistance drafting
 advisories please mail [EMAIL PROTECTED]

 This and other CORE SDI security advisories are available at
 http://www.core-sdi.com/english/publications.html


Technical Description:

 Buffer overflow in WinVNC client:

 A malicious server can exploit a buffer overflow in the client by sending a
 fake server version and instead of the challenge method and the challenge
 itself the following packet:

 A rfbConnFailed packet with a length of 'reason' greater than 1024 and a
 'reason string' of 1024 bytes. The client will try to log the reason string
 calling the Log::Print method (ClientConnection.cpp, class
 ClientConnection, method Authenticate, line 434).
 Log::Print (Log.h, line 61) calls Log::ReallyPrint (Log.cpp) which calls
 _vstprintf with a local buffer of fixed length (1024 bytes).

 Exploitation of the above problem will lead to the execution of arbitrary
 code on the client machine with the privileges of the user running the
 VNC client.


DISCLAIMER:

 The content of this advisory are copyright (c) 2000 CORE SDI Inc.
 and may be distributed freely provided that no fee is charged for this
 distribution and proper credit is given.

$Id: VNC-clientbo-advisory.txt,v 1.7 2001/01/29 21:26:45 iarce Exp $


---

"Understanding. A cerebral secretion that enables one having it to know
 a house from a horse by the roof on the house,
 Its nature and laws have been exhaustively expounded by Locke,
 who rode a house, and Kant, who lived in a horse." - Ambrose Bierce


==[ CORE Seguridad de la Informacion S.A. ]=
Ivan Arce
Presidente
PGP Fingerprint: C7A8 ED85 8D7B 9ADC 6836  B25D 207B E78E 2AD1 F65A
email   : [EMAIL PROTECTED]
http://www.core-sdi.com
Florida 141 2do cuerpo Piso 7
C1005AAG Buenos Aires, Argentina.
Tel/Fax : +(54-11) 4331-5402
=
---

RE: screen update

[rhenderson]

Thank you.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Gustafsson,
> Bjorn
> Sent: Tuesday, January 30, 2001 7:15 AM
> To: '[EMAIL PROTECTED]'
> Subject: RE: screen update
> 
> 
> Uncheck "Poll console windows only", that should take care of 
> the telnet
> window.
> 
>/Bjorn
> 
> -Original Message-
> From: rhenderson [mailto:[EMAIL PROTECTED]]
> Sent: den 30 januari 2001 14:01
> To: Vnc-List (E-mail)
> Subject: screen update
> 
> 
> Actually a newbie question.  We still have a lot of character 
> applications.
> The screens do not update very well in the telnet sessions.  
> I am thinking
> that it is because the default is the mouse click update is 
> the default.
> Which "Update Handing" would work the best to update what is 
> displayed in
> the telnet session?  I currently have "Poll foreground 
> Window" and "Poll
> Console Windows Only".
> 
> Thanks
> 
> Rick Henderson
> Windham School District
> (936) 291-5356
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: Keyboard problems with AIX

[Liaw, Andy]

I had a problem with the "5" key, which was recognized as the backspace.
Don't know if this is the problem you have.  The solution is find the system
"Xmodmap" file (on my Linux box it's in /etc/X11/xinit, but I don't know
where it is on an AIX system) and delete the line that says "keycode 22 =
Backspace".

Andy

> -Original Message-
> From: Jason Bramsden [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 29, 2001 6:48 AM
> To: [EMAIL PROTECTED]
> Subject: Keyboard problems with AIX
> 
> 
> I've got problems with using a keyboard on VNC viewer 
> connecting to Xvnc
> running on AIX 4.1.9. 
> 
> I downloaded the the VNC binarys from
>  . 
> 
> Installed them and they seem to be fine. I can launch VNC and 
> start using
> the X-windows session. But when I try a terminal to the 
> command line and try
> to type, the keys seem to be comming out wrong. 
> 
> I looked at the FAQ on VNC and it talks about if a modifier 
> key is pressed
> and the viewer losses focus of the remote server. I don't 
> think this is the
> problem as I tried serveral times to connect to the remote 
> server, each time
> restarting the remote server.
> 
> 
> I know that the viewer running on MS Win 2K, can not be the 
> problem as I can
> get this to connect to a Solaris and HP machine with no problems.
> 
> Any one have any ideas.
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

SSH and Roadrunner

[John Creegan]

I'm pretty sure it's a problem with Roadrunner.  I have one user connecting
using zebedee from his home using the Roadrunner "1-way" product.  I can see
that his Windows 95 generated zebedee connection (from his home) to my linux
"VNC server"  at work is working by reading the log file created by the zebedee
server.  I can also see that he disconnects normally.  I'm using linux and generating
multiple private VNC desktops on one box.

So:
 1. I ask him to connect, he does.
 2. I ask him to disconnect, he does.
 3. He and I use identical vncviewer.zbd files, except for the targetport value
 (he and I are using different desktops)
 4.My connection fails.  Hangs at "Making connection to xxx.xxx.xxx.xxx:x"
(where: xxx.xxx.xxx.xxx:x is the IP and VNC server instance numbers.)
 5. I can connect to my VNC desktop through the internal network
 without zebedee.
 6. I can connect to my VNC desktop from home as well, without
 using zebedee.  Of course, before the zebedee test I disconnect.

Since we're coming in through my firewall at work on the same port, it can't be a
problem here.  Since he's not on during the test (as verified by the log file) it can't
be "one instance of zebedee on a given port number will only support one
connection at a time."  Since I can take my linksys router out of the equation by
direct-connecting the Win98 machine to the cable modem, repeat the test and get
the same result it can't be the linksys router.  That only leaves the Roadrunner
"2-way" firewall.

Unless I missed something?

 - John
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

:0 problems, how to make available to VNC

[brandon willis]

I have still been unsuccessful in my attempts to get :0 tied to vn on 
Solaris 8, does anyone have any other suggestions, or no of nay way this may 
be done?
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Password

[Tina Kane]

As I stated in my message, I had already set a default password on all the
machines.  However, it appears that if another profile is created and that
person changes the password, VNC recognizes several passwords depending on the
profile.

Dan Fulbright wrote:

> > I get a VNC Authentication failed error when connecting to a bunch of
> > machines that I changed the VNC password to.  What is weird is that if I
> > log into that machine, then try to VNC to it, I can succesfully
> > connect.  It is only an issue if the machine is at the login window.
>
> Please read the documentation.  This is probably the most FAQ on this
> list.  You need to set the default password.
>
> Dan Fulbright
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: [CORE SDI ADVISORY] WinVNC server buffer overflow

[Glenn Mabbutt]

Hmm, I don't seem to have the debuglevel key at all.  If it's not present,
does it use a default value (hopefully 0 ;)
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Windows ME and VNC

[Paul Stanley]

Has anyone experienced a conflict between ME and VNC?  When I attempt to
call another computer from ME, it pauses then says "can not connect to
server".  I have no problem whatsoever of connecting from 98' to ME, which
is the reverse action. Any help?


---
FREE! The World's Best Email Address @email.com
Reserve your name now at http://www.email.com
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: Password

[Glenn Mabbutt]

I believe that's correct - I think you can set up "current user" settings,
each with a different password.  Never tried it myself - 1 password seems to
be convenient for administration purposes.

-Original Message-
From: Tina Kane [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 30, 2001 10:01 AM
To: [EMAIL PROTECTED]
Subject: Re: Password


As I stated in my message, I had already set a default password on all the
machines.  However, it appears that if another profile is created and that
person changes the password, VNC recognizes several passwords depending on
the
profile.

Dan Fulbright wrote:

> > I get a VNC Authentication failed error when connecting to a bunch of
> > machines that I changed the VNC password to.  What is weird is that if I
> > log into that machine, then try to VNC to it, I can succesfully
> > connect.  It is only an issue if the machine is at the login window.
>
> Please read the documentation.  This is probably the most FAQ on this
> list.  You need to set the default password.
>
> Dan Fulbright
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Password

[David Rock]

Are you using Win9x or WinNT? There are some differences in how this is handled.
If it's run as a service, then this may get around this problem. It IS supposed to
be different based on profiles, which is reflected in the different passwords. The
service setup ALSO has its own password that is separate from the profile setups

Tina Kane wrote:

> As I stated in my message, I had already set a default password on all the
> machines.  However, it appears that if another profile is created and that
> person changes the password, VNC recognizes several passwords depending on the
> profile.
>
> Dan Fulbright wrote:
>
> > > I get a VNC Authentication failed error when connecting to a bunch of
> > > machines that I changed the VNC password to.  What is weird is that if I
> > > log into that machine, then try to VNC to it, I can succesfully
> > > connect.  It is only an issue if the machine is at the login window.
> >
> > Please read the documentation.  This is probably the most FAQ on this
> > list.  You need to set the default password.
> >
> > Dan Fulbright

--
-David Rock
[EMAIL PROTECTED]

-BEGIN GEEK CODE BLOCK-
version 3.12
GIT>CS d-(?) s+:+>+: a- C++ UL++> P+ L++(+++)>$ E()---
W(+)-- N++ o? K- w--() O+ M-@ V-- PS PE Y PGP- t++(+)
5++@ X- R(+++) tv(+) b+ DI++ D++ G e+(*) h--- r+++ y+++
-END GEEK CODE BLOCK-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Password

[Tina Kane]

Windows NT 4.0 server and Enterprise Server.  VNC is being run as a service on all the
machines.  Half work fine with the VNC admin password, the other half appear to have
been changed within profiles.  The users of course, have no idea what they set them
too.  The problem I have is that when you log out of a machine, I should still be able
to authenticate with my password unless VNC retains the password information of the
user last logged in.  Though I have logged into all the machines as admin, reset the
passwords, logged off and still haven't been able to authenticate.  I can reach the
machines fine, it just won't accept the password.  Now, if I log into a machine and
leave it logged in, then VNC will work fine.  I can't seem to find any explanation of
this.

David Rock wrote:

> Are you using Win9x or WinNT? There are some differences in how this is handled.
> If it's run as a service, then this may get around this problem. It IS supposed to
> be different based on profiles, which is reflected in the different passwords. The
> service setup ALSO has its own password that is separate from the profile setups
>
> Tina Kane wrote:
>
> > As I stated in my message, I had already set a default password on all the
> > machines.  However, it appears that if another profile is created and that
> > person changes the password, VNC recognizes several passwords depending on the
> > profile.
> >
> > Dan Fulbright wrote:
> >
> > > > I get a VNC Authentication failed error when connecting to a bunch of
> > > > machines that I changed the VNC password to.  What is weird is that if I
> > > > log into that machine, then try to VNC to it, I can succesfully
> > > > connect.  It is only an issue if the machine is at the login window.
> > >
> > > Please read the documentation.  This is probably the most FAQ on this
> > > list.  You need to set the default password.
> > >
> > > Dan Fulbright
>
> --
> -David Rock
> [EMAIL PROTECTED]
>
> -BEGIN GEEK CODE BLOCK-
> version 3.12
> GIT>CS d-(?) s+:+>+: a- C++ UL++> P+ L++(+++)>$ E()---
> W(+)-- N++ o? K- w--() O+ M-@ V-- PS PE Y PGP- t++(+)
> 5++@ X- R(+++) tv(+) b+ DI++ D++ G e+(*) h--- r+++ y+++
> -END GEEK CODE BLOCK-
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: [CORE SDI ADVISORY] WinVNC server buffer overflow

[James ''Wez'' Weatherall]

Yes, it's normally set to zero and DebugMode is also set to be disabled.

Cheers,

James "Wez" Weatherall
--
  "The path to enlightenment is /usr/bin/enlightenment"
Laboratory for Communications Engineering, Cambridge - Tel : 766513
AT&T Labs Cambridge, UK  - Tel : 343000

- Original Message -
From: "Glenn Mabbutt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 3:06 PM
Subject: RE: [CORE SDI ADVISORY] WinVNC server buffer overflow


> Hmm, I don't seem to have the debuglevel key at all.  If it's not present,
> does it use a default value (hopefully 0 ;)
> -
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> -
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Password

[James ''Wez'' Weatherall]

Remember to set the Default Properties password, NOT the User Properties
password.

James "Wez" Weatherall
--
  "The path to enlightenment is /usr/bin/enlightenment"
Laboratory for Communications Engineering, Cambridge - Tel : 766513
AT&T Labs Cambridge, UK  - Tel : 343000

- Original Message -
From: "Tina Kane" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 4:51 PM
Subject: Re: Password


> Windows NT 4.0 server and Enterprise Server.  VNC is being run as a
service on all the
> machines.  Half work fine with the VNC admin password, the other half
appear to have
> been changed within profiles.  The users of course, have no idea what they
set them
> too.  The problem I have is that when you log out of a machine, I should
still be able
> to authenticate with my password unless VNC retains the password
information of the
> user last logged in.  Though I have logged into all the machines as admin,
reset the
> passwords, logged off and still haven't been able to authenticate.  I can
reach the
> machines fine, it just won't accept the password.  Now, if I log into a
machine and
> leave it logged in, then VNC will work fine.  I can't seem to find any
explanation of
> this.
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

PalmVnc

[franca]

I'm trying to connect my palm to my desktop with no success for two weeks
now so I need some help.

System : Win95 + Palm IIIxe OS 3.5

I can get VNCserver 3.3.3r7 running on the desktop (icon on the task bar)

Connect the Palm through ppp connection with Mocha. wich confirm valid
connection

When I start PalmVNC I got a screen showing PalmVNC logo version 1.40 with
the mention "not connected" at the bottom and without any error message of
some kind.

Is there somebody kind enough to help me?

Thanks
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: SSH and RoadRunner (was: Re: VNC and SSH)

[Scott C. Best]

John:
Hello! Quick thought for you:

>4. Both will connect through the router to my VNC server at work 
>   (Linux) w/o zebedee just fine.

I suspect that the firewall at your workplace is specifically
configured to allow you to connect to some specific port range on that
Linux box (maybe just the standard 590x ones). If you telnet'ed to,
say, that machines port 25 (SMTP) it's *probably* blocked. Well, hee,
it should be. :)

>   That connection allows me to make zebedee port conf
>   changes from home.  After each change, I kill and restart 
>   zebedee on the linux box and check the log file to make certain that
>   Zebedee is listening on the new port

Yes, but does your workplace firewall allow you to connect to
the port you chose?
Try this...since connecting to the VNC server appears to work,
stop and restart the VNC server and have it listen to port 45678, 
rather than it's default at 5900. *Then* startup ZeBeDee on the server
and have *it* listen to 5900. You should now be able to start ZebeDee 
on one of your home Windows systems and connect to ZebeDee at the server.

In other words, it sounds as if your workplace firewall is
allowing an incoming connection from your home-LAN to a specific
port (probably 5900) on the Linux box. What you *do* with that
'firewall hole' is up to you: I strongly doubt that your workplace
firewall (or your IPS's firewall) is smart enough to distinguish TCP 
packets sent by VNC and the TCP packets sent by ZeBeDee.

Good luck!

-Scott
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Stream encryption - is it time?

[Scott C. Best]

Jonathan:

Hello! First off, my apologies for my perceived role
as "director of improvement prevention". :) Hope the discussion
proves at all useful.

> ...If the encrypted key from the server was
> sniffed (or retrieved by connecting to the server), it could be replayed 
> to a client which (if it knew the key password) would then think the
> cracker was the real server.

Right, exactly. The cracker wouldn't even have to know the
plaintext of the key, they could just playback the ciphertext
directly.

> OK, so we're back to the question of server authentication at the
> client end.  A user-entered password is not good enough, because any
> password short enough for a user to remember can be cracked in a
> relatively short amount of time by any recent personal computer, given
> that the algorithm is known...

Well, not really. My understanding is that you (and others)
want to add a layer to the initial VNC authorization so that the
client believes it is talking to a *specific* server, and the
server believes it is talking to *specific* client, and you want
to do this over an insecure channel *and* to a client that has
no permanent local storage. Easy. :)
My suggestion would be a one-time password for each
client-to-server connection. Ie, a SecureID card. Seen them? It's a
credit-card size calculator with a 6-digit readout. Every 10 seconds
the number changes. Your server knows the number and the sequence
(which is *not* an open-source algorithm) asks for it at login. So 
what if it's intercepted on the way to the server, it's only "good" 
for 10 seconds anyhow. I hated them when I first saw them, but have
grown to appreciate the capability. No permanent storage at the
client needed, either. Though they need their card at hand to login.

Which leads into my next point: this problem isn't that
complicated to solve for *if* there's longterm storage on the client.
Then you just utilize classic, tested, non-home-grown schemes such
as what SSH (or IPSec) does with pub-priv key pairs and DFE key
exchange.

-Scott
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Unknown VNC authentication result

[Thomas Wright]

I am having a problem connecting a vncviewer (3.3.3.r1)
on a linux machine to a Xvnc server (3.3.3r2) running
on a linux machines. 
The linux machines are 2.2.13 with a XFree86 3.3.5
windows system. 
The error message's I get are:

Unknown VNC authentication result: 33685504

I have also got a very similar result of 

Unknown VNC authentication result: 33554432

Can anyone tell me what these two numbers represent
or how I might fix this issue.

thanks in advance
twright
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

RE: Windows ME and VNC

[Kurt Mysker]

Is this with a certain Win ME machine or have you tested it with other ME
machines?

Kurt Mysker
[EMAIL PROTECTED]
"Philosophizing is nothing more than looking into a mirror that is looking
into another mirror, and picking the layer you like best." - Yoursker

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Paul Stanley
Sent: Tuesday, January 30, 2001 9:22 AM
To: [EMAIL PROTECTED]
Subject: Windows ME and VNC


Has anyone experienced a conflict between ME and VNC?  When I attempt to
call another computer from ME, it pauses then says "can not connect to
server".  I have no problem whatsoever of connecting from 98' to ME, which
is the reverse action. Any help?


---
FREE! The World's Best Email Address @email.com
Reserve your name now at http://www.email.com
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Stream encryption - is it time?

[James H. Cloos Jr.]

Yes, security should be a base level feature of vnc.

Start-TLS is probably the best option to choose.  For the compiled
code, openssl provides all of the low level support requried.  For
the Java viewer one of the readily available jar files can be used.

The protocol needs to be updated to allow each side to advertize
whether it supports and/or requires encryption and to start
encrypting the session.

The servers and viewers need to be updated to offer options
for requiring an encrypted session and aborting when the
other side lacks support.

The crypted sessions should (optionally) be compressed before
encrypting.

A shorter term solution may be to use a different port via SSL as per
http vs. https.

-JimC
-- 
James H. Cloos, Jr.   1024D/ED7DAEA6 
<[EMAIL PROTECTED]>  E9E9 F828 61A4 6EA9 0F2B  63E7 997A 9F17 ED7D AEA6
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

TCP Port Mapping on Win2K

[Robert Charlebois]

Anyone know how to get this to work?  I have tried mapping port 2000 on the
public machine to the IP of a private machine that have VNC listening on
port 2000 (which works from a private machine) but it will not connect.  I
am using ICS.

Thanks,

Rob...
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Mac VNC server with multi-user?

[Jonathan Morton]

>I'm working with VNC for the Mac OS, running 9.1...and I am trying to
>get the VNCserver to run in a system-service sort of way (i.e.
>running automatically as an extension or control panel, so that it
>loads as a service, and not an application).
>
>Basically I want to be able to use the Multi-user setup of Mac OS
>9.1, and be able to log in and out remotely without multi-users
>'quitting' the VNCserver application upon logout--thus severing my
>connection.
>
>it would also prevent the users from quitting the application on
>their own, which would be a very nice benefit.
>
>Anyone have any solutions?  It would be great to be able to do remote
>troubleshooting with VNC, but be able to log in as an Admin to get
>the rights to make changes.

Although I use MacOS 9 on one of my machines, I haven't tried using
Multiple Users.  I suspect, however, that in order to work in the manner
you describe, VNC would have to be a Faceless Background Application (a bit
like a Service under Windows) to survive a logout.  While this is probably
possible, and may even be quite easy, it's not on my priority list at
present.

Higher on my priority list are essential things like, for example, getting
my degree, fixing stability bugs, and getting in features that *everyone*
wants, not just a few.  Unfortunately I don't have an unlimited amount of
time, nice as that would be.

--
from: Jonathan "Chromatix" Morton
mail: [EMAIL PROTECTED]  (not for attachments)
big-mail: [EMAIL PROTECTED]
uni-mail: [EMAIL PROTECTED]

The key to knowledge is not to rely on people to teach you it.

Get VNC Server for Macintosh from http://www.chromatix.uklinux.net/vnc/

-BEGIN GEEK CODE BLOCK-
Version 3.12
GCS$/E/S dpu(!) s:- a20 C+++ UL++ P L+++ E W+ N- o? K? w--- O-- M++$ V? PS
PE- Y+ PGP++ t- 5- X- R !tv b++ DI+++ D G e+ h+ r- y+
-END GEEK CODE BLOCK-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-

Re: Password

[David Rock]

Tina Kane wrote:

> Windows NT 4.0 server and Enterprise Server.  VNC is being run as a service on all 
>the
> machines.  Half work fine with the VNC admin password, the other half appear to have
> been changed within profiles.  The users of course, have no idea what they set them
> too.  The problem I have is that when you log out of a machine, I should still be 
>able
> to authenticate with my password unless VNC retains the password information of the
> user last logged in.  Though I have logged into all the machines as admin, reset the
> passwords, logged off and still haven't been able to authenticate.  I can reach the
> machines fine, it just won't accept the password.  Now, if I log into a machine and
> leave it logged in, then VNC will work fine.  I can't seem to find any explanation of
> this.
>

This sounds like the service password isn't set right. One thing you can do is check 
the
password hash in the registry. It your case, there should be at least two different 
keys:

HKEY_LOCAL_MACHINE\Software\ORL\Winvnc3\Default
HKEY_CURRENT_USER\Software\ORL\Winvnc3\Default

They should both have the same password info. If not, just change the HKLM one to match
the HKCU entry. The Local Machine one corresponds to the service version of WinVNC

The other thing you can do is access the service setup info from
Start->Programs->VNC->Administrative Tools->Show Default Settings. This shows the setup
screen for the service entry, not the current user entry.

--
-David Rock
[EMAIL PROTECTED]

-BEGIN GEEK CODE BLOCK-
version 3.12
GIT>CS d-(?) s+:+>+: a- C++ UL++> P+ L++(+++)>$ E()---
W(+)-- N++ o? K- w--() O+ M-@ V-- PS PE Y PGP- t++(+)
5++@ X- R(+++) tv(+) b+ DI++ D++ G e+(*) h--- r+++ y+++
-END GEEK CODE BLOCK-
-
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
-