PT-2002-2000 · Sun · Sunpci Ii Vnc

Published 2002-08-31 · Updated 2008-09-05 · CVE-2002-0994

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SunPCi II VNC (affected versions not specified)

Description: The issue concerns a weak authentication scheme used by SunPCi II VNC. This weakness allows remote attackers to obtain the VNC password by intercepting the random byte challenge, which serves as the key for encrypted communications.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0994

Affected Products

Sunpci Ii Vnc

References · 5

• 🔥 http://securityfocus.com/bid/5146 · Exploit
• 🔥 https://exploit-db.com/exploits/21592 · Exploit
• http://iss.net/security_center/static/9476.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0994 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html · Note