GCVE-110-CERTCC-2001-303080

Advisory Published

Vulnetix · Advisory published January 23, 2001

WinVNC's challenge/response mechanism can allow an intruder to obtain legitimate credentials from a valid client in order to gain unauthorized access to the server.

Download JSON Open in Console

Risk Scores

certcc-cam

impact13population9exploitation0widely_known15score_current3.94875ease_of_exploitation6

References

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

advisory

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

url

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

url

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

url

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

url

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON