CVE-2002-0863

Medium

Description

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."

SeverityMedium

CVSS5.0

Exploit probability—

Product

Microsoft Windows

PublishedOct 11, 2002

First seenOct 11, 2002

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051

Affected products

Product	Affected versions	Fixed in
microsoft windows_2000	No range specified	—
microsoft .net_windows_server	beta3	—
microsoft windows_2000_terminal_services	No range specified	—
microsoft windows_nt	4.0	—
microsoft windows_xp	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.