CVE-2002-1511 in Tightvnc

Summary

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Disclosure: 03/03/2003
• Moderation: VulDB entry created
• Entries: VDB-20154
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00946
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1511
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1511
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1511/