UltraVNC icon indicating copy to clipboard operation
UltraVNC copied to clipboard

None Authentication doesn't follow 3.8 protocol

Open WalterYongtaoWang opened this issue 2 years ago • 10 comments

When auth is None and version is 3.8, it should have the SecurityResult message:

https://vncdotool.readthedocs.io/en/0.8.0/rfbproto.html#none

WalterYongtaoWang avatar Aug 04 '22 00:08 WalterYongtaoWang

@RudiDeVos: Can you look?

Neustradamus avatar Aug 11 '22 02:08 Neustradamus

Need more info you test between what flavors ?

RudiDeVos avatar Aug 11 '22 18:08 RudiDeVos

This is based on UltraVNC 1.3.8.1. Also tested on an old version at first.

Please be aware, both the UltraVNC client and server don't handle this correctly.

WalterYongtaoWang avatar Sep 07 '22 23:09 WalterYongtaoWang

@RudiDeVos: Can you look the last comment?

Neustradamus avatar Oct 11 '22 20:10 Neustradamus

@WalterYongtaoWang: Have you tested more recent builds? Currently, the last one is UltraVNC 1.4.2.0.

Neustradamus avatar Apr 26 '23 21:04 Neustradamus

When security type is None it seems latest UltraVNC Viewer 1.4.2.0 handles the (extra) SecurityResult packet for version 3.8 of the protocol just fine so this issue is probably already resolved.

Didn't test server impl though.

wqweto avatar Apr 27 '23 09:04 wqweto

I was testing the UltraVNC client and connecting to the VMWare WebConsole, which is using None Authentication via WebSocekt. Right now, I don't have a VMWare pod for testing (I also need a proxy to convert the websocket to normal TCP Socket).

Just tried the VNC server 1.4.2, set the AuthRequired as 0, but I couldn't make it work.

On Thu, Apr 27, 2023 at 3:05 AM Vladimir Vissoultchev < @.***> wrote:

When security type is None it seems latest UltraVNC Viewer 1.4.2.0 handles the (extra) SecurityResult packet for version 3.8 of the protocol just fine so this issue is probably already resolved.

Didn't test server impl though.

— Reply to this email directly, view it on GitHub https://github.com/ultravnc/UltraVNC/issues/53#issuecomment-1525200461, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD76GM4E4H5Q4KIUHECUZOLXDIZF7ANCNFSM55QUHSFA . You are receiving this because you were mentioned.Message ID: @.***>

WalterYongtaoWang avatar Apr 28 '23 16:04 WalterYongtaoWang

Just tried the VNC server 1.4.2, set the AuthRequired as 0, but I couldn't make it work.

What client do you use to connect to your UltraVNC server 1.4.2.0?

wqweto avatar Apr 30 '23 12:04 wqweto

Sorry, I made a mistake. The UltraVNC new version (both client and server) actually is working fine with None Auth:

I was using our own VNC client: https://www.remotespark.com/view/vnc.html

The old versions of UltraVNC client can not connect to 1.4.2, but Tiger VNC client does work with Ultras 1.4.2 server.

On Sun, Apr 30, 2023 at 6:38 AM Vladimir Vissoultchev < @.***> wrote:

Just tried the VNC server 1.4.2, set the AuthRequired as 0, but I couldn't make it work.

What client do you use to connect to your UltraVNC server 1.4.2.0?

— Reply to this email directly, view it on GitHub https://github.com/ultravnc/UltraVNC/issues/53#issuecomment-1529016414, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD76GM5VIQGLJ3P7KTI62ODXDZML3ANCNFSM55QUHSFA . You are receiving this because you were mentioned.Message ID: @.***>

WalterYongtaoWang avatar Apr 30 '23 17:04 WalterYongtaoWang

You could probably open a new issue about incompatibility of Tiger VNC client w/ UltraVNC server 1.4.2.0 or leave this one open now that there is more info for @RudiDeVos to investigate further.

wqweto avatar Apr 30 '23 20:04 wqweto

TigerVNC client does work with Ultra 1..4.2 (RFB 3.8 with None Auth), but it didn't work with old versions of Ultra because of this bug.

On Sun, Apr 30, 2023 at 2:39 PM Vladimir Vissoultchev < @.***> wrote:

You could probably open a new issue about incompatibility of Tiger VNC client w/ UltraVNC server 1.4.2.0 or leave this one open now that there is more info for @RudiDeVos https://github.com/RudiDeVos to investigate further.

— Reply to this email directly, view it on GitHub https://github.com/ultravnc/UltraVNC/issues/53#issuecomment-1529134377, or unsubscribe https://github.com/notifications/unsubscribe-auth/AD76GM6DZA6YICLMQAGHNY3XD3EYVANCNFSM55QUHSFA . You are receiving this because you were mentioned.Message ID: @.***>

WalterYongtaoWang avatar May 01 '23 17:05 WalterYongtaoWang

@RudiDeVos: I think it is possible to close this ticket? It works perfectly with 1.4.2.0.

Neustradamus avatar Jun 19 '23 19:06 Neustradamus