VDB
CVE-2005-1794
CVE-2005-1794
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
EPSS 5.97% · 90.8th percentile
Risk Scores
CVSS 2.0
6.400000095367432
EPSS Score
5.97%
90.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| microsoft | remote_desktop_connection | 5.1.2600.2180 |
| microsoft | windows_terminal_services_using_rdp | 5.2 |
Exploit Intelligence
- 15605 (circl)
- http://www.oxid.it/downloads/rdp-gbu.pdf (circl)
- 13818 (circl)
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 (circl)
- oval:org.mitre.oval:def:12441 (circl)
- Scanner for network for CVE-2005-1794. (github-poc)
- Scanner for network for CVE-2005-1794. (github-poc)
- Scanner for network for CVE-2005-1794. (github-poc)
- Scanner for network for CVE-2005-1794. (github-poc)
- CVE-2005-1794Scanner (cve.org)
Timeline
- Jun 1, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Oct 30, 2023 EPSS Score