Description
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
References
- 56161 vendor-advisory
- CLSA-2003:640 vendor-advisory
- http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog
- RHSA-2003:041 vendor-advisory
- vnc-rand-weak-cookie(11384) vdb-entry
- MDKSA-2003:022 vendor-advisory
- 200302-15 vendor-advisory
- RHSA-2003:068 vendor-advisory
- 6905 vdb-entry