CVE-2016-5673

https://notcve.org/view.php?id=CVE-2016-5673

25 Aug 2016 — UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number. UltraVNC Repeater en versiones anteriores a 1300 no restringe direcciones IP de destino o puertos TCP, lo que permite a atacantes remotos obtener la funcionalidad open-proxy usando una subcadena :: entre la dirección IP y el número de puerto. • http://www.kb.cert.org/vuls/id/735416 • CWE-284: Improper Access Control •