CVE-2005-1794

None

CVSS

—

EPSS

18.0%

Published

Jun 1, 2005

CISA due date

—

The record

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

Affected packages

Ecosystem	Package	Introduced	Fixed