CyberSec.Space Logo
Back to CVE Browser

CVE-2000-1164

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.1010%
EPSS Percentile24.86th
PublishedJan 9, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.

Affected Platforms (CPE)

📦
Att

Winvnc

= 3.3.3
📦
Att

Winvnc

= 3.3.3r7

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html
🔗 http://www.securityfocus.com/bid/1961
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5545
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html
🔗 http://www.securityfocus.com/bid/1961
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5545

Related Vulnerabilities

CVE-2001-016810.0

Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary...

CVE-2001-159410.0

GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polest...

CVE-2001-01677.6

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary...

CVE-2001-14227.5

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC...

CVE-2000-1164 Detail & Impact Analysis | CVSS 9.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space