CVE

CVE-2002-1511

Date: (C)2003-03-03   (M)2023-12-22

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

200302-15

SUNALERT-56161

BID-6905

CLSA-2003:640

MDKSA-2003:022

RHSA-2003:041

RHSA-2003:068

http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog

vnc-rand-weak-cookie(11384)