CVE

Id
5253  
CVE No.
CVE-2002-0863  
Status
Candidate  
Description
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Cole, Green, Wall | NOOP(2) Christey, Cox  
Comments
Christey> ADDREF CERT-VN:VU#865833 | URL:http://www.kb.cert.org/vuls/id/865833  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28078 5253 CVE-2002-0863 BUGTRAQ:20020916 Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities  View
28079 5253 CVE-2002-0863 URL:http://marc.info/?l=bugtraq&m=103235960119404&w=2  View
28080 5253 CVE-2002-0863 BUGTRAQ:20020918 Microsoft Windows Terminal Services vulnerabilities  View
28081 5253 CVE-2002-0863 URL:http://marc.info/?l=bugtraq&m=103236181522253&w=2  View
28082 5253 CVE-2002-0863 MS:MS02-051  View
28083 5253 CVE-2002-0863 URL:http://www.microsoft.com/technet/security/bulletin/ms02-051.asp  View
28084 5253 CVE-2002-0863 CERT-VN:VU#865833  View
28085 5253 CVE-2002-0863 URL:http://www.kb.cert.org/vuls/id/865833  View
28086 5253 CVE-2002-0863 BID:5711  View
28087 5253 CVE-2002-0863 URL:http://www.securityfocus.com/bid/5711  View
28088 5253 CVE-2002-0863 BID:5712  View
28089 5253 CVE-2002-0863 URL:http://www.securityfocus.com/bid/5712  View
28090 5253 CVE-2002-0863 OVAL:oval:org.mitre.oval:def:199  View
28091 5253 CVE-2002-0863 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:199  View
28092 5253 CVE-2002-0863 XF:win-rdp-checksum-leak(10121)  View
28093 5253 CVE-2002-0863 URL:http://www.iss.net/security_center/static/10121.php  View
28094 5253 CVE-2002-0863 XF:win-rdp-keystroke-monitoring(10122)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63894 JVNDB-2002-000221 Microsoft Windows における RDP パケットによる情報漏洩の脆弱性 Microsoft Windows において、Terminal Service の通信で使用される RDP (Remote Desktop Protocol) による暗号化通信では、通信を盗聴することによりセッションで使用されているチェックサムを特定することが可能になる脆弱性が存在します。 CVE-2002-0863 5253 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000221.html  View