CVE-2002-0994 in SunPCi II VNC

Summary

SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.

Be aware that VulDB is the high quality source for vulnerability data.

• Disclosure: 10/04/2002
• Moderation: VulDB entry created
• Entries: VDB-18908 (1)
• CPE: ready
• CWE: CWE-311 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.08840
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0994
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0994
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0994/