GCVE - cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Terminal Server (`af8030e6-e273-5841-986d-20e3fd9e3add`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2593`	vulnerable	2026-06-08 04:49:45.534366	Details available The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006. Published: 2007-05-11T03:55:00.000Z Updated: 2024-08-07T13:42:33.553Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/468049/100/0/threaded http://www.securityfocus.com/archive/1/468057/100/0/threaded http://www.securityfocus.com/archive/1/468203/100/0/threaded http://osvdb.org/36146 http://www.securityfocus.com/bid/23899	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4465`	vulnerable	2026-06-08 04:49:17.981331	Details available Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code Published: 2006-08-31T20:00:00.000Z Updated: 2024-08-07T19:14:47.092Z Open on db.gcve.eu Reference links http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.html http://www.securityfocus.com/archive/1/443428/100/200/threaded http://www.securityfocus.com/archive/1/443364/100/200/threaded http://securityreason.com/securityalert/1486	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0540`	vulnerable	2026-06-08 04:45:20.454516	Details available Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:21:38.799Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/6912 http://www.securityfocus.com/bid/3099 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0404`	vulnerable	2026-06-08 04:44:58.483621	Details available The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. Published: 2000-07-12T04:00:00.000Z Updated: 2024-08-08T05:14:21.544Z Open on db.gcve.eu Reference links http://www.microsoft.com/technet/support/kb.asp?ID=262694 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036 http://www.securityfocus.com/bid/1262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0331`	vulnerable	2026-06-08 04:44:58.457225	Details available Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability. Published: 2000-07-12T04:00:00.000Z Updated: 2024-08-08T05:14:21.278Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2000-04/0147.html http://www.securityfocus.com/bid/1135 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0305`	vulnerable	2026-06-08 04:44:58.449540	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0259`	vulnerable	2026-06-08 04:44:58.436423	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0232`	vulnerable	2026-06-08 04:44:58.426981	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0909`	vulnerable	2026-06-08 04:44:58.156589	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0680`	vulnerable	2026-06-08 04:44:58.083139	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0391`	vulnerable	2026-06-08 04:44:58.022050	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.