Unscored severity · published Oct 11, 2002
CVE-2002-0863
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote…
–
CVSS
22%
EPSS
No
On KEV
Description
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
Exploitation
Is it being used?
Exploit prediction (EPSS)22.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NW
.net Windows Server · Microsoft
beta3 · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2000 Terminal Services · Microsoft
All versions, or not specified · source: NVD
WN
Windows NT · Microsoft
4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0863
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0863
marc.info
http://marc.info/?l=bugtraq&m=103235960119404&w=2
marc.info
http://marc.info/?l=bugtraq&m=103236181522253&w=2
Vendor Advisory
http://www.iss.net/security_center/static/10121.php
www.iss.net
http://www.iss.net/security_center/static/10122.php
US Government Resource
http://www.kb.cert.org/vuls/id/865833
www.securityfocus.com
http://www.securityfocus.com/bid/5711
More from .net Windows Server
–
CVE-2002-0864
The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm…