PT-2001-2655 · Microsoft · Windows Xp

Published 2001-12-31 · Updated 2008-09-05 · CVE-2001-1571

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows XP

Description The issue concerns the Remote Desktop client sending the most recent user account name in cleartext. This could allow remote attackers to obtain terminal server user account names via sniffing.

Recommendations For Windows XP, consider disabling the Remote Desktop client until a patch is available to prevent potential exploitation. Restrict access to sensitive networks to minimize the risk of sniffing attacks.

Fix

Related Identifiers

CVE-2001-1571

Affected Products

Windows Xp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1571 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html · Note
• http://securityfocus.com/bid/3720 · Note
• http://iss.net/security_center/static/7732.php · Note