Vulnerabilities > CVE-2002-1511 - Authentication Cookie Predictability vulnerability in TightVNC Server

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

nessus

NVD

Published: 2003-03-03

Updated: 2008-09-10

Summary

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.

Part	Description	Count
Application	Att ATT VNC 3.3.3 ATT VNC 3.3.3R2 ATT VNC 3.3.4 ATT VNC 3.3.5 ATT VNC 3.3.6	5
Application	Tightvnc Tightvnc Tightvnc 1.2.0 Tightvnc Tightvnc 1.2.1 Tightvnc Tightvnc 1.2.2 Tightvnc Tightvnc 1.2.3 Tightvnc Tightvnc 1.2.4 Tightvnc Tightvnc 1.2.5	6

NASL family	Mandriva Local Security Checks
NASL id	MANDRAKE_MDKSA-2003-022.NASL
description	A vulnerability was discovered in the VNC server script that generates an X cookie, used by X authentication. The script generated a cookie that was not strong enough and allow an attacker to more easily guess the authentication cookie, thus obtaining unauthorized access to the VNC server.
last seen	2020-06-01
modified	2020-06-02
plugin id	14007
published	2004-07-31
reporter	This script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/14007
title	Mandrake Linux Security Advisory : vnc (MDKSA-2003:022)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2003-068.NASL
description	Updated VNC packages are available to fix a weak cookie vulnerability. VNC is a tool for providing a remote graphical user interface. The VNC server acts as an X server, but the script for starting it generates an MIT X cookie (which is used for X authentication) without using a strong enough random number generator. This could allow an attacker to be able to more easily guess the authentication cookie. All users of VNC are advised to upgrade to these erratum packages, which contain a patch to correct this issue.
last seen	2020-06-01
modified	2020-06-02
plugin id	12370
published	2004-07-06
reporter	This script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/12370
title	RHEL 2.1 : vnc (RHSA-2003:068)

advisories