First published: Mon Dec 31 2001(Updated: )
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | =gold | |
Microsoft Windows XP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1571 is considered a moderate severity vulnerability due to the potential exposure of sensitive user account information.
To mitigate CVE-2001-1571, users should upgrade to a later version of Windows where this vulnerability is addressed.
CVE-2001-1571 exposes user account names in cleartext, making them vulnerable to interception by attackers.
CVE-2001-1571 affects users of Windows XP, specifically the Gold and Home editions.
Yes, CVE-2001-1571 can be exploited remotely by attackers with the ability to sniff network traffic.