NVD

Id
54757  
Name
CVE-2007-2593  
Description
The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-11  
Modified Date
2008-11-15  
Seq
2007-2593  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277981 54757 CVE-2007-2593 20070509 RDP TLS downgrade  View
277982 54757 CVE-2007-2593 20070509 RE: RDP TLS downgrade  View
277983 54757 CVE-2007-2593 20070510 RE: RDP TLS downgrade  View
277984 54757 CVE-2007-2593 23899  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55135 JVNDB-2007-003827 Microsoft Windows 2003 Server の Terminal Server における中間者攻撃を実行される脆弱性 Microsoft Windows 2003 Server の Terminal Server には、TLS が使用されている際、SSL および自己署名された証明書の要件を回避される、サーバセキュリティレベルを下げる、および中間者攻撃を実行される脆弱性が存在します。 CVE-2007-2593 25948 CVE-2007-2593 54757 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003827.html 2007-05-11 2012-09-25 View