medium5.0
CVE-2002-0863
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which coul…
Impact
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Windows Server | Version beta3 |
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2000 Terminal Services | All versions |
| Microsoft | Windows Nt | Version 4.0 |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103235960119404&w=2
- http://marc.info/?l=bugtraq&m=103236181522253&w=2
- http://www.iss.net/security_center/static/10121.php
- http://www.iss.net/security_center/static/10122.php
- http://www.kb.cert.org/vuls/id/865833
- http://www.securityfocus.com/bid/5711
- http://www.securityfocus.com/bid/5712
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A199