CVE-2002-0863: Microsoft .net Windows Server

Medium severity, CVSS 5.0. EPSS: 22% chance of exploitation in the next 30 days.

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."

Affected products

• Microsoft .net Windows Server: version beta3 only
• Microsoft Windows 2000: any version
• Microsoft Windows 2000 Terminal Services: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2002-10-11. Last modified 2026-06-16.