CVE

Id
5720  
CVE No.
CVE-2002-1336  
Status
Entry  
Description
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31584 5720 CVE-2002-1336 BUGTRAQ:20020724 VNC authentication weakness  View
31585 5720 CVE-2002-1336 URL:http://marc.info/?l=bugtraq&m=102753170201524&w=2  View
31586 5720 CVE-2002-1336 BUGTRAQ:20020726 RE: VNC authentication weakness  View
31587 5720 CVE-2002-1336 URL:http://marc.info/?l=bugtraq&m=102769183913594&w=2  View
31588 5720 CVE-2002-1336 CONFIRM:http://www.tightvnc.com/WhatsNew.txt  View
31589 5720 CVE-2002-1336 CONECTIVA:CLA-2003:640  View
31590 5720 CVE-2002-1336 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640  View
31591 5720 CVE-2002-1336 MANDRAKE:MDKSA-2003:022  View
31592 5720 CVE-2002-1336 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022  View
31593 5720 CVE-2002-1336 REDHAT:RHSA-2002:287  View
31594 5720 CVE-2002-1336 URL:http://www.redhat.com/support/errata/RHSA-2002-287.html  View
31595 5720 CVE-2002-1336 REDHAT:RHSA-2003:041  View
31596 5720 CVE-2002-1336 URL:http://www.redhat.com/support/errata/RHSA-2003-041.html  View
31597 5720 CVE-2002-1336 BID:5296  View
31598 5720 CVE-2002-1336 URL:http://www.securityfocus.com/bid/5296  View
31599 5720 CVE-2002-1336 XF:vnc-weak-authentication(5992)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63316 JVNDB-2003-000042 VNC の random() 関数における認証を回避される脆弱性 VNC には、random() 関数の実装の不備のため、 Cookie に由来する認証情報を容易に推測されてしまう脆弱性が存在します。 CVE-2002-1336 5720 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000042.html  View