Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2002-1511

Disclosure Date: March 03, 2003 (last updated February 22, 2025)
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
0
Attacker Value
Unknown

CVE-2002-1336

Disclosure Date: December 11, 2002 (last updated February 22, 2025)
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
0