sp1d3rx / a-vnc Goto Github PK

What steps will reproduce the problem?
1. Connect
2. Open a program that prompts the user for UAC
3. Screen freezes till the end user clicks yes/no

What is the expected output? What do you see instead?
Expected to see the UAC prompt and the remote user be allowed to click yes/no

What version of the product are you using? On what operating system?
Latest, Windows 7

Please provide any additional information below.

The arrow keys (up down left right) are not being sent to the server.

Cannot login via ISA proxy server

What steps will reproduce the problem?
1. access avnc through a proxy server (microsoft isa proxy)

Result: "wrong password"

------

Firefox displays html source of pages instead of rendered content (even 
without going through a proxy). This appears to be because A-VNC is not 
emitting http headers.

-------

application does not work when hosted behind an apache forwarding proxy 
(apache ProxyPass/ProxyPassReverse directives)


-------

Http fiddler reports protocol violations:

Fiddler has detected a protocol violation in session #3.

The Server did not return properly formatted HTTP Headers. Maybe missing 
altogether (e.g. HTTP/0.9), maybe only \r\r instead of \r\n\r\n?

If we are accessing the server with multiple clients then images displayed 
slowly.

What steps will reproduce the problem?
1. Connect to server through browser.
2. Login.
3. Open Task Manager and look at CPU usage on the server.
4. Put your browser in the background and open a new task on the local 
workstation such as notepad.
5. Notice the CPU usage remains unchanged and refreshes quickly.

What is the expected output? What do you see instead?
It should refresh less often if it is in the background. 

project have some binarys without source code provided
README.txt lacks information where such code can be found

Is it possible to pass the password and/or other settings via the url?  That 
way the remote window could be embdedded in another page.

Any mouse or Key events in server not send back to client unless u refress 
the page.

it works only for local ip.
Is there any way to work with external ip?
(Getting external ip & port forwarding)

Can you add IPv6 support ?

What steps will reproduce the problem?
1. login to a-vnc. no problems.
2. lock the screen on windows xp.
3. connect again, try to do anything.

What is the expected output? What do you see instead?
expect to see the "screen is locked" message. Instead, it doesn't do 
anything and the program crashes with an error.

Not sure if this is possible with Mono etc, but support for Linux and or MacOSX 
would be excellent.

What steps will reproduce the problem?
1. Attempt to start A-VNC as a regular user (IE no write permission to
HKLM\Software\AVNC)
2. When reading registry settings AVNC generates an unhanded exception.
3. AVNC opens the registry for write, but only conducts reads ont eh values.

What is the expected output? What do you see instead?
Expect it to fail saving changes, but at least still work.


What version of the product are you using? On what operating system?


Please provide any additional information below.
The attached patch should fix the issue causing the exception. EduVNC
reworked this portion of code significantly so I've adapted the corrections
back into the existing AVNC tree, but I haven't tested this exact
implementation. 

I should also note this code handles the exception and disables the
controls for the settings which can't be saved back to the registry which
may not be the ideal behavior with the AVNC interface. Don't feel bound to
this, please use your judgment on however you think its best to handle the
error in your interface. If you need any clarification or have a comment,
please let me know Jeremy Collins

The patch alters Login.htm to include sha1() from MIT licensed PHPJS
(http://phpjs.org/) and use it to hash passwords before sending them to the
server. The patch also performs the corresponding hash server side to
verify the password. The salt is different each time the program starts, so
the resulting hashed password transmitted between the client and server has
a different value each run.

The attached patch is released under an MIT licenses. If you have any
problems or questions please let me know, Jeremy Collins