Lucene search
HistoryMay 07, 2001 - 4:00 a.m.
CVE-2000-1164
winvnc
registry key
special access
information security
cve-2000-1164
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.5%
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
Affected configurations
Node
attwinvncMatch3.3.3
ORattwinvncMatch3.3.3r7
| CPE | Name | Operator | Version |
|---|---|---|---|
| att:winvnc | att winvnc | eq | 3.3.3 |
| att:winvnc | att winvnc | eq | 3.3.3r7 |
Related
cvelist
cvelist
CVE-2000-1164
2001-05-07 04:00:00
nessus
nessus
Microsoft Windows SMB Registry : WinVNC's Key Permissions
2000-11-20 00:00:00
nvd
nvd
CVE-2000-1164
2001-01-09 05:00:00
cert
cert
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.5%
Related for CVE-2000-1164