Back to CVE Browser

CVE-2006-4309

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0140%

EPSS Percentile38.90th

PublishedAug 23, 2006

Last ModifiedApr 16, 2026

Vulnerability Description

VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions.

Affected Platforms (CPE)

📦

Ak Systems

Windows Terminal

= 1.2.5_exvlp

References & Advisories

🔗 http://securityreason.com/securityalert/1438

🔗 http://www.securityfocus.com/archive/1/444060/100/0/threaded

🔗 http://www.securityfocus.com/bid/19659

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28532

🔗 http://securityreason.com/securityalert/1438

🔗 http://www.securityfocus.com/archive/1/444060/100/0/threaded

🔗 http://www.securityfocus.com/bid/19659

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28532

Related Vulnerabilities

CVE-2005-251110.0

Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain acces...

CVE-2009-252310.0

The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC...

CVE-2004-090010.0

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of c...

CVE-2012-116610.0

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary comma...