CVE-2002-0863
Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
Published:Oct 1, 2002
Last Modified:Apr 16, 2026
EPS:Oct 1, 2002
EPSS Score:0.20219
CVSS Score:5
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
.net Windows Server
Microsoft
.net Windows Server
Vendor
Microsoft
Product
Windows 2000
Microsoft
Windows 2000
Vendor
Microsoft
Product
Windows 2000 Terminal Services
Microsoft
Windows 2000 Terminal Services
Vendor
Microsoft
Product
Windows Nt
Microsoft
Windows Nt
Vendor
Microsoft
Product
Windows Xp
Microsoft
Windows Xp
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
