#1428 accepted passwords 'starting with', not 'equal'

[Lukasz Fu]

Hi,
Your client login app when prompting for password accepts all password strings only "starts with" not "equals", so if password is 'Password' then 'PasswordMuchLonger' is also accepted...
Looked through your code and I think VncAuthentication class, line: 53 is responsible for the bug. Maybe expanding condition in 'if' from line: 51 would fix it (original:(null == password), suggested: (null==password || password.length() > 8)),
Bests.
L.

[Lukasz Fu]

The above of course is in java code, but bug it self in all instances
Tigtvnc ver is 2.8.8

[Anton]

https://tools.ietf.org/html/rfc6143 7.2.2

[Brad Silva]

The above comment is correct, but is useless unless you want to do some research.

Basically, the problem is that the protocol only accepts an 8 character password. The fault here is not with TightVNC.