CVE-2002-0864 The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that...
MediumCVSS 5.0
EPSS 16.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net windows server | = beta3 | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2000 terminal services | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20020916 Microsoft Windows XP Remote Desktop denial of service vulnerability mailing-list
- 20020918 Microsoft Windows Terminal Services vulnerabilities mailing-list
- winxp-remote-desktop-dos(10120) vdb-entry vendor-advisory
- 5713 exploit patch vdb-entry vendor-advisory
- MS02-051 vendor-advisory