UBUNTU-CVE-2013-1430

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...

DEBIAN-CVE-2013-1430

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...

CVE-2013-1430

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...

CVE-2013-1430

CVE-2013-1430 affects xrdp before 0.9.1, where after a successful RDP login xrdp creates the file ~/.vnc/sesman_${username}_passwd containing the user’s cleartext password encrypted with DES using a known key. This exposes credentials on the server side. Public notices and vendor advisories (e.g....

FreeBSD : VirtualBox -- undisclosed vulnerabilities (7d40edd1-901e-11e6-a590-14dae9d210b8)

Oracle reports reports : Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core. Unspecified...

655,000 Healthcare Records Being Sold on Dark Web

A hacker selling upwards to 655,000 healthcare records on the dark web allegedly obtained them after exploiting a vulnerability in how companies implement remote desktop protocol, or RDP, functionality. The hacker, who goes by the handle “thedarkoverlord,” allegedly penetrated three healthcare...

xDedic Hacked Servers Market May Be Larger Than Originally Thought

New data anonymously shared with Kaspersky Lab researchers may enlarge the scope of and provide additional context to the hacked RDP servers for sale on the now defunct xDedic marketplace. The underground marketplace was disclosed in a report published last Tuesday describing an eBay-style platfo...

Inside the xDedic Hacked Server Marketplace

An underground market peddling hacked servers was a unique find, even for a seasoned researcher such as Juan Andres Guerrero-Saade of Kaspersky Lab. But there it was, xDedic.biz selling access to tens of thousands of servers for pennies on the dollar. A Russian-speaking hacker group was...

Underground Market Selling Cheap Access to Hacked Servers

Criminals and advanced attackers for two years have had at their disposal an extensive trading platform selling access to hacked servers worldwide. For as little as $6 USD, attackers can purchase access to a compromised machine and launch attacks or get a one-time peek at all the data on a server...

The vulnerability of the Windows operating system, allowing a hacker to read arbitrary files on the disk

The vulnerability of the Volume Manager Driver in the Windows operating system is related to the lack of user verification when accessing the RemoteFX RDP USB function. Exploiting this vulnerability allows a malicious actor to read arbitrary files from the disk by making requests to RemoteFX...

stickyKeysHunter - A Script to Test an RDP Host for Sticky Keys and Utilman Backdoor

This bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. How does it work? 1. Connects to RDP using rdesktop 2. Sends shift 5 times using xdotool to trigger sethc.exe backdoors...

Information disclosure

Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka...

CVE-2016-0190

CVE-2016-0190 : Information disclosure vulnerability in Microsoft Windows where the Volume Manager Driver (volmgr.sys) does not correctly tie a USB disk mounted via RemoteFX over RDP to the mounting user session, allowing local access to file/directory information on the mounted USB disk. Affecte...

Microsoft Windows RDP Drive Information Disclosure Vulnerability (3155784)

This host is missing an important security update according to Microsoft Bulletin MS16-067 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-067: Security update for volume manager driver: May 10, 2016

None None...

Session fixation

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2016-3985

Pulse Connect Secure (PCS) versions 8.1R7 and 8.2R1 have a vulnerability in the RDP client session restrictions feature that allows remote authenticated users to bypass access restrictions via unspecified vectors. This is documented across multiple connected sources (CVE/NVD entry, Red Hat, CNVD,...

Privilege escalation

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol RDP Elevation of Privilege Vulnerability."...

CVE-2016-0036

CVE-2016-0036 (RDP Elevation of Privilege) affects the Remote Desktop Protocol in Microsoft Windows products including Windows 7 SP1, Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The flaw stems from the RDP implementation; remote authenticated users can execute arbitrary code by se...

Microsoft Windows Remote Desktop Elevation of Privilege Vulnerability (3134700)

This host is missing an important security update according to Microsoft Bulletin MS16-017. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...