CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows…

High · published June 1, 2005

CVSS v3.1

7.4

EPSS

18%

Percentile

97.2

In the wild

Unconfirmed

What it is

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

The record

Technical detail

CVSS v3.1: 7.4 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.18015 · 97.2th percentile
Published: 2005-06-01T04:00Z

EPSS history

Timeline

01 JUN 04:00Z
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows…
cvelistv5