Unrated severityNVD Advisory· Published Dec 11, 2002· Updated Apr 16, 2026
CVE-2002-1336
CVE-2002-1336
Description
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
Affected products
5cpe:2.3:a:tightvnc:tightvnc:1.2.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:tightvnc:tightvnc:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:tightvnc:tightvnc:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:tightvnc:tightvnc:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:tightvnc:tightvnc:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:tightvnc:tightvnc:1.2.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- distro.conectiva.com.br/atualizacoes/nvd
- marc.infonvd
- marc.infonvd
- www.mandrakesoft.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2002-287.htmlnvd
- www.redhat.com/support/errata/RHSA-2003-041.htmlnvd
- www.securityfocus.com/bid/5296nvd
- www.tightvnc.com/WhatsNew.txtnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/5992nvd
News mentions
0No linked articles in our index yet.