CVE

Id
5895  
CVE No.
CVE-2002-1511  
Status
Entry  
Description
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
33220 5895 CVE-2002-1511 CONFIRM:http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog  View
33221 5895 CVE-2002-1511 CONECTIVA:CLSA-2003:640  View
33222 5895 CVE-2002-1511 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640  View
33223 5895 CVE-2002-1511 GENTOO:200302-15  View
33224 5895 CVE-2002-1511 URL:http://security.gentoo.org/glsa/glsa-200302-15.xml  View
33225 5895 CVE-2002-1511 MANDRAKE:MDKSA-2003:022  View
33226 5895 CVE-2002-1511 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022  View
33227 5895 CVE-2002-1511 REDHAT:RHSA-2003:041  View
33228 5895 CVE-2002-1511 URL:http://www.redhat.com/support/errata/RHSA-2003-041.html  View
33229 5895 CVE-2002-1511 REDHAT:RHSA-2003:068  View
33230 5895 CVE-2002-1511 URL:http://www.redhat.com/support/errata/RHSA-2003-068.html  View
33231 5895 CVE-2002-1511 SUNALERT:56161  View
33232 5895 CVE-2002-1511 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56161  View
33233 5895 CVE-2002-1511 BID:6905  View
33234 5895 CVE-2002-1511 URL:http://www.securityfocus.com/bid/6905  View
33235 5895 CVE-2002-1511 XF:vnc-rand-weak-cookie(11384)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63317 JVNDB-2003-000043 VNC においてセキュリティ上不適切な cookie を作成する脆弱性 ------------ CVE-2002-1511 5895 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000043.html  View