CVE-2019-17662
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is...
- Published
- Oct 16, 2019
- Updated
- Aug 5, 2024
- Assigning CNA
- mitre
- Evidence observed
- Oct 17, 2019
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 99.9%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Sources
modules/auxiliary/scanner/http/thinvnc_traversal.rb
Metasploit Framework modulesDeclared conditions
- verification: check_not_declared($.auxiliary_scanner/http/thinvnc_traversal.check)
http/cves/2019/CVE-2019-17662.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)
- CVE-2019-17662Exploit
Exploit code for CVE-2019-17662
- CVE-2019-17662-ExploitExploit
Exploit For CVE-2019-17662
- CVE-2019-17662Exploit
Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit
- CVE-2019-17662Exploit
Golang implementation of ThinVNC exploit CVE-2019-17662. For educational purposes only.
- CVE-2019-17662Exploit
Exploit for CVE-2019-17662 (ThinVNC 1.0b1)
- CVE-2019-17662Exploit
Exploit for CVE-2019-17662, a path traversal vulnerability in ThinVNC, demonstrating URL normalization bypass to access arbitrary files on the target server.
- Bash-Script-CVE-2019-17662Exploit
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Nikhith Tumamlapalli · windows · Oct 17, 2019
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.