CVE-2005-1794

2005-06-0104:00:00

mitre

web.nvd.nist.gov

346

microsoft

terminal server

rdp

vulnerability

spoofing

rsa

private key

man-in-the-middle

nvd

cve-2005-1794

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.013

Percentile

85.7%

JSON

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

Affected configurations

Nvd

Node

microsoftremote_desktop_connectionMatch5.1.2600.2180windows_xp

microsoftwindows_terminal_services_using_rdpMatch5.2

VendorProductVersionCPE
microsoftremote_desktop_connection5.1.2600.2180cpe:2.3:a:microsoft:remote_desktop_connection:5.1.2600.2180:*:windows_xp:*:*:*:*:*
microsoftwindows_terminal_services_using_rdp5.2cpe:2.3:a:microsoft:windows_terminal_services_using_rdp:5.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	remote_desktop_connection	5.1.2600.2180	cpe:2.3:a:microsoft:remote_desktop_connection:5.1.2600.2180::windows_xp:::::
microsoft	windows_terminal_services_using_rdp	5.2	cpe:2.3:a:microsoft:windows_terminal_services_using_rdp:5.2:::::::*