This script is Copyright (C) 2007-2013 Tenable Network Security, Inc.
The remote VNC server does not require authentication.
The VNC server installed on the remote host allows an attacker
to connect to the remote host as no authentication is required
to access this service.
** The VNC server sometimes sends the connected user to the XDM login
** screen. Unfortunately, Nessus cannot identify this situation.
** In such a case, it is not possible to go further without valid
** credentials and this alert may be ignored.
Disable the No Authentication security type.
Risk factor :
High / CVSS Base Score : 7.5
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now