Description
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
References
- 5711 vdb-entry
- MS02-051 vendor-advisory
- win-rdp-keystroke-monitoring(10122) vdb-entry
- VU#865833 third-party-advisory
- 20020916 Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities mailing-list
- 5712 vdb-entry
- 20020918 Microsoft Windows Terminal Services vulnerabilities mailing-list
- win-rdp-checksum-leak(10121) vdb-entry
- oval:org.mitre.oval:def:199 vdb-entry signature