UltraVNC w/ DSM Plugin Detection (2)

Info Nessus Plugin ID 25821


A remote control service is running on this port.


UltraVNC seems to be running on the remote port.

Upon connection, the remote service on this port sends pseudo-random bytes.

It is probably UltraVNC with the new DSM encryption plugin. This plugin tunnels the RFB protocol into a RC4 or AES encrypted stream.


If this service is not needed, disable it or filter incoming traffic to this port.

See Also


Plugin Details

Severity: Info

ID: 25821

File Name: ultravnc_dsm_detect_2.nasl

Version: $Revision: 1.11 $

Type: remote

Published: 2007/07/31

Modified: 2017/01/05

Dependencies: 10342, 17975

Risk Information

Risk Factor: Info