CVE-2005-1794: Microsoft Remote Desktop Connection

High severity, CVSS 7.4. EPSS: 16.3% chance of exploitation in the next 30 days.

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

Affected products

• Microsoft Remote Desktop Connection: version 5.1.2600.2180 only
• Microsoft Windows Terminal Services Using Rdp: version 5.2 only

Published 2005-06-01. Last modified 2026-06-16.