CVE-2002-0863: Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt...

Security readout for executives and security teams

This is an old RDP weakness affecting Microsoft Windows 2000 and Windows XP. The issue could let someone observing network traffic infer contents of otherwise encrypted RDP sessions because plaintext session checksums were not encrypted. Business urgency depends on whether these legacy systems still exist and allow RDP access across observable networks. Exposure is most likely in environments that still run Windows 2000 or Windows XP with RDP or Terminal Services enabled, especially across networks where another party can observe traffic. Treat this as a legacy exposure check rather than an internet-scale emergency. If Windows 2000 or XP with RDP remains in production, prioritize patch verification, access restriction, or isolation because session confidentiality may be weakened. Mitigation focus: Identify Windows 2000 and Windows XP hosts with RDP or Terminal Services enabled.; Apply Microsoft MS02-051 guidance or vendor-recommended updates where applicable.; Restrict RDP access to trusted administrative network paths..

Prepared

Jul 1, 2026, 06:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.