CVE-2005-1794 Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of leg...
MediumCVSS 6.4
EPSS 18.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft remote desktop connection | = 5.1.2600.2180 | No fix listed |
| Microsoft windows terminal services using rdp | = 5.2 | No fix listed |
References
- 15605 third-party-advisory
- www.oxid.it vendor-advisory
- 13818 vdb-entry
- ics-cert.us-cert.gov
- oval:org.mitre.oval:def:12441 signature vdb-entry