WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Winvnc | Att | 3.3.3 (including) | 3.3.3 (including) |
| Winvnc | Att | 3.3.3r7 (including) | 3.3.3r7 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html
- http://www.securityfocus.com/bid/1961
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5545
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html
- http://www.securityfocus.com/bid/1961
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5545