CVE-2002-1336

CVE-2002-1336 describes a vulnerability in TightVNC versions prior to 1.2.6 where the same challenge string is generated for multiple connections. This flaw allows remote attackers to bypass VNC authentication by passively sniffing challenge and response data from other users. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.