Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/05/2001 Updated: 19/12/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and previous versions allows remote malicious users to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
att winvnc

## # $Id: winvnc_http_getrb 7724 2009-12-06 05:50:37Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' clas ...

NVD-CWE-Other http://www.securityfocus.com/bid/2306 http://www.kb.cert.org/vuls/id/598581 http://marc.info/?l=vnc-list&m=98080763005455&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/6026 https://nvd.nist.gov https://www.exploit-db.com/exploits/16491/https://www.kb.cert.org/vuls/id/598581

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0168

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect