Vulnerability Details CVE-2002-0994
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.03
EPSS Ranking 86.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html
- http://www.iss.net/security_center/static/9476.php
- http://www.securityfocus.com/bid/5146
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html
- http://www.iss.net/security_center/static/9476.php
- http://www.securityfocus.com/bid/5146
Products affected by CVE-2002-0994
-
cpe:2.3:a:sun:sun_pci_ii_driver:2.3