CVE-2000-1164

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and…

published May 7, 2001

CVSS
—
EPSS
2%
Percentile
74.0
In the wild
Unconfirmed
What it is

⚠️ A registry key with open permissions could be a recipe for disaster! With everybody having Special Access, sensitive data like passwords could easily be read and modified. 😱 Think of this like a library where anyone can not only read the books but also edit them as they please—sensitive information is left vulnerable to anyone who walks in! 📚 This vulnerability allows any user to access and alter sensitive information stored in the WinVNC3 registry key. If an attacker were to exploit this, they could gain unauthorized access to the system, potentially leading to data theft or malicious changes that could harm the system's integrity.

Put simply

Think of this like a library where anyone can not only read the books but also edit them as they please—sensitive information is left vulnerable to anyone who walks in! 📚 CVE-2000-1164 arises because WinVNC installs the WinVNC3 registry key with overly permissive access rights for the Everybody group, allowing any user to read and modify sensitive data.

What to do

This vulnerability allows any user to access and alter sensitive information stored in the WinVNC3 registry key. If an attacker were to exploit this, they could gain unauthorized access to the system, potentially leading to data theft or malicious changes that could harm the system's integrity. To remediate this, restrict permissions on the WinVNC3 registry key to limit access to only trusted users. Regularly audit registry permissions to ensure sensitive data isn't left exposed. Consider updating to a more secure version of WinVNC if available. You've got this! With a little tweaking, you'll lock down that registry and keep your system secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01505 · 74.0th percentile
Published
2001-05-07T04:00Z
EPSS history
Timeline
  • 07 MAY 04:00Z
    WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and…
    cvelistv5