high7.5Public exploit code
CVE-2002-0994
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sun SunPCi II VNC Software 2.3 - Password Disclosure2002-07-03 · local · unix · Verified
Impact
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Sun Pci Ii Driver | Version 2.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html
- http://www.iss.net/security_center/static/9476.php
- http://www.securityfocus.com/bid/5146
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html
- http://www.iss.net/security_center/static/9476.php
- http://www.securityfocus.com/bid/5146