NVD

Id
80291  
Name
CVE-2002-1336  
Description
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-12-11  
Modified Date
2016-10-17  
Seq
2002-1336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400299 80291 CVE-2002-1336 CLA-2003:640  View
400300 80291 CVE-2002-1336 20020724 VNC authentication weakness  View
400301 80291 CVE-2002-1336 20020726 RE: VNC authentication weakness  View
400302 80291 CVE-2002-1336 MDKSA-2003:022  View
400303 80291 CVE-2002-1336 RHSA-2002:287  View
400304 80291 CVE-2002-1336 RHSA-2003:041  View
400305 80291 CVE-2002-1336 5296  View
400306 80291 CVE-2002-1336 http://www.tightvnc.com/WhatsNew.txt  View
400307 80291 CVE-2002-1336 vnc-weak-authentication(5992)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63316 JVNDB-2003-000042 VNC の random() 関数における認証を回避される脆弱性 VNC には、random() 関数の実装の不備のため、 Cookie に由来する認証情報を容易に推測されてしまう脆弱性が存在します。 CVE-2002-1336 5720 CVE-2002-1336 80291 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000042.html 2003-02-20 2007-04-01 View