CVE-2001-1571
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext,...
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
Exploit likelihood
What each source reports
NVD Score used
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
- Record
CVE-2001-1571- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
- Record
CVE-2001-1571- Updated
- 2026-11-02
EUVDEUVD-2001-1548 No score
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
- Record
EUVD-2001-1548- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22vx-583j-gv96 No score
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext,...
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
- Record
GHSA-22vx-583j-gv96- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1571 is a medium vulnerability (CVSS 5.0) in Microsoft Windows Xp, published December 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. No source names a fixed version.