CVE-2001-0663

published 2001-12-06

CVE-2001-0663: Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP)…

Priority P4 21 medium 5 CVSS 2.0

AV N AC L Au N C N I N A P

EXPLOIT

Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows_nt	—	—

Detection & IOCs extracted from sources · hover to see the quote

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21123.zip↗

port 3389↗

• → Detect malformed/invalid RDP packet sequences sent to Terminal Server (port 3389) from remote hosts, which may indicate CVE-2001-0663 DoS exploitation attempts. ↗
• → Monitor for sudden Terminal Service unresponsiveness or crashes following bursts of malformed RDP traffic from a single remote source. ↗

• · The vulnerability affects Windows NT and Windows 2000 Terminal Server specifically; patched or modern systems are not affected. Ensure RDP (TCP 3389) is not exposed to untrusted networks. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.