Icon of program: Windows 2000 RDP Protocol…

Windows 2000 RDP Protocol Security Vulnerability Patch

Download now

Used Windows 2000 RDP Protocol Security Vulnerability Patch for Windows?

Editors’ Review

Download.com staff
This essential Microsoft patch resolves two critical RDP protocol vulnerabilities in Windows 2000 and XP. It prevents information disclosure and denial-of-service attacks by addressing cryptographic flaws and malformed packet handling.

  • Pros

    • Resolves "Cryptographic Flaw in RDP Protocol" vulnerability.
    • Prevents information disclosure in RDP/Terminal Services sessions.
    • Eliminates unencrypted checksums in RDP sessions (Windows 2000/XP).
    • Fixes RDP service crash due to malformed data packets.
    • Addresses unauthenticated denial-of-service vulnerability.

  • Cons

    • Limited applicability to Windows 2000 and XP versions only.
Icon of program: Windows 2000 RDP Protocol…

Windows 2000 RDP Protocol Security Vulnerability Patch

Download now

Used Windows 2000 RDP Protocol Security Vulnerability Patch for Windows?

Explore More

Full Specifications

GENERAL
Release
Latest update
Version
MS02-051
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows 2000
  • Windows 10
Additional Requirements
Windows 2000
POPULARITY
Total Downloads
2,568
Downloads Last Week
5
Report Software

Last Updated

Developer’s Description

By Microsoft
Resolve the "Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure" security vulnerability in Windows 2000 to prevent an attacker from potentially learning encrypted information sent during Remote Desktop or Terminal Services sessions.
This patch eliminates two vulnerabilities affecting the implementation of the RDP protocol:

The first vulnerability involves the way in which session encryption is implemented in certain versions of RDP. All RDP implementations permit the data in an RDP session to be encrypted. However, in the versions of RDP that are included in Windows 2000 and Windows XP, the checksums for the plain-text session data are sent without themselves being encrypted. An attacker who can ""eavesdrop on"" and record an RDP session might be able to conduct a straightforward cryptanalytic attack against the checksums and to recover the session traffic.

The second vulnerability involves the way in which the RDP implementation in Windows XP handles data packets that are malformed in a particular way. When RDP receives such data packets, the Remote Desktop service stops working. When this problem occurs, Windows stops working correctly also. An attacker does not have to be authenticated on an affected computer to deliver packets of this type to an affected computer.

Download.com
Your review for Windows 2000 RDP Protocol Security Vulnerability Patch