← Vulnerability feed

Vulnerability record · CVE-2000-1164 · published 9 January 2001

CVE-2000-1164: Att winvnc vulnerability

Att · Winvnc

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.

9.0 CVSS 2.0 High EPSS 1.5% · top 26.7%
9.0CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html PatchVendor Advisory
http://www.securityfocus.com/bid/1961 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5545
http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html PatchVendor Advisory
http://www.securityfocus.com/bid/1961 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5545

Track CVE-2000-1164 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2001-0168AT&T WinVNC server buffer overflow via long HTTP GET requestAT&T WinVNC server 3.3.3r7 and earlier contains a buffer overflow that is triggered by a long HTTP GET request when the DebugLevel registry key is gr…EPSS 71%analysed7.6CVE-2001-0167AT&T WinVNC client buffer overflow via rfbConnFailed reason stringAT&T WinVNC client 3.3.3r7 and earlier contains a buffer overflow in its handling of the rfbConnFailed packet, triggered by an overly long reason str…EPSS 51%analysed7.5CVE-2001-1422Att winvnc vulnerabilityWinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by …EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2000-1164), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.