Security Basics mailing list archives

Re: vnc server


From: ilaiy <ilaiy.e () gmail com>
Date: Mon, 23 Jan 2006 15:41:49 -0600

VNC sessions are not encryted.

Try tunneling the traffic through a ssh session or a VPN connection
and you should be good.

./thanks
ilaiy

On 1/22/06, Jared Lyvers <jared () lewiscommunications com> wrote:
First off, sorry Simon.  I ment to send this to the list but sent it to
only you instead.

Now, on to my real question.

I'm looking to use VNC on my windows machine for remote logins.  Currently
I only have the following open ports:

25/tcp   open   smtp
80/tcp   open   http
113/tcp  closed auth
1352/tcp open   lotusnotes
5902/tcp open   vnc-2
5903/tcp open   vnc-3
8080/tcp open   http-proxy

Are there any security problems that I may be over looking by using VNC on
my machine?

Regards,

JL

--

// Jared Lyvers
// -----------------------
// Director of Interactive
// Director of IT
// LPI Certified
// -----------------------
// www.lewiscommunications.com


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: