> -----Original Message-----
> From: Kishore Sambasivan [mailto:KishoreS@;fundtech.com]
> 
> I use VNC3.3.4.   I noticed that VNC is accepting incorrect 
> passwords as
> long as the password entered contains the actual password as 
> a prefix.   Has
> anyone encountered this problem or has it been reported already?  

That's not a bug, it's a feature and properly stated in the design
documents: Only the first 8 characters of the passwords are significant. If
the password is Sambasivan, then Sambasiv will be accepted too.

Or are you saying that if the password is 'cbee' that 'cbeerse' is also
accepted? That is a bug since that violates the 8 characters significant
statement.

On the other hand, don't rely on the vnc security, it is not designed to be
secure, it is designed to be usefull.

CBee
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to