The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-05-11T03:55:00
Updated: 2024-08-07T13:42:33.553Z
Reserved: 2007-05-10T00:00:00
Link: CVE-2007-2593
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-05-11T04:20:00.000
Modified: 2024-11-21T00:31:10.633
Link: CVE-2007-2593
Redhat
No data.