← back
CVE-2001-1422

CVE-2001-1422

EPSS 2.1%
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/5992http://www1.corest.com/common/showdoc.php?idxseccion=10&idx=117http://www.kb.cert.org/vuls/id/303080http://www.securityfocus.com/bid/2275