← Database

CVE-2002-0863

MEDIUM CVSS: 5.0 Published: 2002-10-11 Modified: 2026-06-16

Description

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."

Affected Platforms

Microsoft Windows NtMicrosoft .Net Windows ServerMicrosoft Windows XpMicrosoft Windows 2000 Terminal ServicesMicrosoft Windows 2000

Weakness Type

NVD-CWE-Other

References