CVE-2002-1848

Published: Dec 31, 2002Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.

Affected (4)

Products: Tightvnc: Tightvnc

Tightvnc

1 product

Tightvnc

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Tightvnc Tightvnc	Version 1.2.1
Tightvnc Tightvnc	Version 1.2.2
Tightvnc Tightvnc	Version 1.2.3
Tightvnc Tightvnc	Version 1.2

References (4)

http://www.securityfocus.com/bid/4835

Source: cve@mitre.org

http://www.tightvnc.com/changelog-win32.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/4835

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tightvnc.com/changelog-win32.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.