| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-1336 | 7.5 |
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
|
10-10-2017 - 01:30 | 11-12-2002 - 05:00 | |
| CVE-2002-1511 | 5.0 |
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
|
10-09-2008 - 19:14 | 03-03-2003 - 05:00 |