CVE-2002-1336
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
Scoring
- CVSS base score
- 0.04
- EPSS probability
- 1.07%
- Published
- 2004-09-01
- Last modified
- 2026-03-16
Affected products
- n/a n/a