CVE-2002-0994 SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
HighCVSS 7.5
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun pci ii driver | = 2.3 | No fix listed |
References
- 20020703 SunPCi II VNC weak authentication scheme vulnerability mailing-list
- sunpci-vnc-weak-authentication(9476) vdb-entry vendor-advisory
- 5146 exploit vdb-entry vendor-advisory