vulnwire
5.0med

CVE-2001-1571

The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.1%
percentile 96%
Public exploits
0
none known

The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.

Exploit prediction (EPSS)

13.09% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

References

  • iss.net /security_center/static/7732.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/3720 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2001-12/0213.html · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.