CVEvulnerability
CVE-2000-1164
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
Affected configurations
• att winvnc 3.3.3
• att winvnc 3.3.3r7
References
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1961 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5545 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1961 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5545 exchange.xforce.ibmcloud.com