Lucene search

K
cveMitreCVE-2001-0167
HistoryMay 03, 2001 - 4:00 a.m.

CVE-2001-0167

2001-05-0304:00:00
mitre
web.nvd.nist.gov
30
buffer overflow
winvnc
remote attacker
arbitrary commands
cve-2001-0167

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.095

Percentile

94.8%

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Affected configurations

Nvd
Node
attwinvncRange3.3.3r7
VendorProductVersionCPE
attwinvnc*cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.095

Percentile

94.8%