UltraVNC w/ DSM Plugin Detection (2)

This script is Copyright (C) 2007-2011 Tenable Network Security, Inc.


Synopsis :

A remote control service is running on this port.

Description :

UltraVNC seems to be running on the remote port.

Upon connection, the remote service on this port sends pseudo-random
bytes.

It is probably UltraVNC with the new DSM encryption plugin. This
plugin tunnels the RFB protocol into a RC4 or AES encrypted stream.

See also :

http://www.ultravnc.com/

Solution :

If this service is not needed, disable it or filter incoming traffic
to this port.

Risk factor :

None

Family: Service detection

Nessus Plugin ID: 25821 ()

Bugtraq ID:

CVE ID: