Patch to VNC which allows a brute force dictionary attack. The fun with vnc is that the password is 8 characters or smaller, and that vnc has no concept of users, which brings down the number of possibilities to try.
dd6532a7d721d5a8132dbba379d53f6798fc81a52af882ace2deed87f07405d6