CVE-2002-1511: The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies

Unscored severity · published Mar 3, 2003

CVE-2002-1511

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies

–

CVSS

1.8%

EPSS

On KEV

Description

The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.8% · higher than 78% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5 · source: NVD

3.3.3; 3.3.3r2; 3.3.4; 3.3.5; 3.3.6 · source: NVD

Affected product

Vnc

Att

References