PT-2005-1107 · Microsoft · Mstlsapi.Dll+4

Published 2005-06-01 · Updated 2026-05-22 · CVE-2005-1794

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2

Description The issue concerns the storage of an RSA private key in mstlsapi.dll, which is used to sign a certificate. This allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks. The vulnerability in the mstlsapi.dll library of the Remote Desktop Services (RDS) in Windows operating systems is related to the unencrypted storage of critical information, enabling a remote attacker to perform a man-in-the-middle attack.

Recommendations For Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-318

Related Identifiers

BDU:2023-07162

CVE-2005-1794

Affected Products

Terminal Server

Remote Desktop Protocol

Remote Desktop Services

Windows

Mstlsapi.Dll

References · 9

• http://oxid.it/downloads/rdp-gbu.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-1794 · Security Note
• https://support.microsoft.com/ru-ru/windows/%D1%86%D0%B5%D0%BD%D1%82%D1%80-%D0%BE%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F-windows-%D1%87%D0%B0%D1%81%D1%82%D0%BE-%D0%B7%D0%B0%D0%B4%D0%B0%D0%B2%D0%B0%D0%B5%D0%BC%D1%8B%D0%B5-%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B-8a903416-6f45-0718-f5c7-375e92dddeb2 · Note
• https://t.me/cveNotify/164538 · Telegram Post
• http://secunia.com/advisories/15605 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12441 · Note
• http://securityfocus.com/bid/13818 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 · Note