TLS Vulnerability in Microsoft Windows Terminal Server

CVE-2007-2593

Summary

The Terminal Server component of Microsoft Windows 2003 Server has a significant vulnerability that allows remote attackers to bypass SSL and self-signed certificate requirements when using TLS. This weakness potentially enables attackers to downgrade server security mechanisms, risking exposure to man-in-the-middle attacks through various unspecified methods. The issue was particularly highlighted in relation to the Remote Desktop Protocol (RDP) 6.0 client. It has been suggested by third-party sources that fixes for this vulnerability may have been implemented around 2006.

References