QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-2593

Back to search

CVE-2007-2593

Published: May 11, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.

VendorProductVersions

n/a

n/a

affected
n/a

References

20070509 RDP TLS downgrade
mailing-list
x_refsource_BUGTRAQ
20070509 RE: RDP TLS downgrade
mailing-list
x_refsource_BUGTRAQ
20070510 RE: RDP TLS downgrade
mailing-list
x_refsource_BUGTRAQ
36146
vdb-entry
x_refsource_OSVDB
23899
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now