Discussion Locked

How secure is WinVNC ?

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How secure would it be to run WinVNC server service on PCs behind NAPTed routers?
Could it be hacked from Internet via ports 5800/5900 it runs on?
We do port mapping at router side for internal services (SMTP, HTTP, etc.), and , of course, 5800/5900 are out of the picture, but concern still remains. Share your experience or know-how. Greatly appreciated.
Thx

2 replies

by joseph moore

Yes, I have seen VNC attack programs that run on the standard VNC ports. They do dictionary attacks against VNC. So, to leave a server open on the Internet with the VNC ports open is not a secure-minded thing to do.
What I have seen instead is running VNC in a SSH tunnel; this is more secure. Here is an article on the subject:
http://web.mit.edu/pismere/ssh/vnc-over-ssh.html

This discussion is closed to new replies.