CVE Vulnerability

CVE-2007-2593

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.securityfocus.com/bid/23899
http://osvdb.org/36146
http://www.securityfocus.com/archive/1/468203/100/0/threaded
http://www.securityfocus.com/archive/1/468057/100/0/threaded
http://www.securityfocus.com/archive/1/468049/100/0/threaded
Configurations

Configuration 1
Information

Published : 2007-05-11 04:20

Updated : 2018-10-16 04:44

NVD link : CVE-2007-2593

Mitre link : CVE-2007-2593

Products Affected
No products.
CWE
NVD-CWE-Other