7.5
CVSSv2

CVE-2002-0994

Published: 04/10/2002 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SunPCi II VNC uses a weak authentication scheme, which allows remote malicious users to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sun pci ii driver 2.3

Exploits

source: wwwsecurityfocuscom/bid/5146/info The SunPCi II card is a co-processor for a number of Solaris based systems, and provides PC software compatibility, including the ability to run Microsoft Windows Driver software is available for the SunPCi card, including a Virtual Network Computing (VNC) client and server A weakness in the a ...