Microsoft Windows Remote Desktop Protocol Code Execution (MS12-020; CVE-2012-0002)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way that the Remote Desktop Protocol RDP accesses an object in memory that has been improperly initialized or has been deleted. A remote attacker may exploit this issue by...

VulnCheck KEV: CVE-2012-0152

The Remote Desktop Protocol RDP service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service application hang via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."...

MS12-020: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)

An arbitrary remote code vulnerability exists in the implementation of the Remote Desktop Protocol RDP on the remote Windows host. The vulnerability is due to the way that RDP accesses an object in memory that has been improperly initialized or has been deleted. If RDP has been enabled on the...

MS12-020 Microsoft RDP Vulnerability Exploit PoC

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

Microsoft RDP Server Private Key Information Disclosure Vulnerability

Remote Desktop Protocol server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Windows Gather Terminal Server Client Connection Information Dumper

This module dumps MRU and connection data for RDP sessions This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Terminal Server Client Connection Information Dumper', 'Description' = ...

THC-HYDRA v7.0 new version released for Download

THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...

Firefox sensor.dll Insecure Library Loading

Added: 09/13/2011 CVE: CVE-2011-2980 BID: 49217 OSVDB: 74583 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A library loading vulnerability in Mozilla Firefox and Thunderbird allows arbitrary command execution when a user...

Firefox sensor.dll Insecure Library Loading

Added: 09/13/2011 CVE: CVE-2011-2980 BID: 49217 OSVDB: 74583 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A library loading vulnerability in Mozilla Firefox and Thunderbird allows arbitrary command execution when a user...

Multiple RDP Initial Connection Requests

Remote Desktop Protocol RDP protocol is a well-established method of secure communication in a client and server architectural model. Brute Force Attacks are a significant threat on users privacy. Using Brute Force it is possible to crack a user account on the remote target and compromise it. The...

Morto Worm spreading via Remote Desktop Protocol

Morto Worm spreading via Remote Desktop Protocol Organizations large and small often make use of Remote Desktop or Terminal Services to remotely connect to Windows computers over the Internet and internally. These tools use Microsoft's RDP protocol to allow the user to operate the remote system...

New Worm Morto Using RDP to Infect Windows PCs

A new worm called Morto has begun making the rounds on the Internet in the last couple of days, infecting machines via RDP Remote Desktop Protocol. The worm is generating a large amount of outbound RDP traffic on networks that have infected machines, and Morto is capable of compromising both...

Remote code execution

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service reboot by sending crafted RDP packets triggering access to an object that 1 was no...

CVE-2011-1968

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP (SP1, SP2, SP3, and x64 editions) and Windows Server 2003 (SP1, SP2, x64, and Itanium editions) is vulnerable to a denial of service (reboot) . The root cause is an improper processing of packets in memory, specifically trig...

Microsoft Windows multiple security vulnerabilities

NDISTAPI service and CSRSS privilege escalations, kernel DoS, TCP/IP DoS, RDP DoS, .Net information disclosure...

Microsoft Windows 远程桌面协议CVE-2011-1968拒绝服务漏洞

Bugtraq ID: 48995 CVE ID：CVE-2011-1968 Microsoft Windows是一款流行的操作系统。 当处理特制的RDP报文时，远程桌面服务存在安全漏洞，攻击者发送特制的RDP报文序列可使系统重新启动。 要成功利用漏洞需要远程桌面管理启用（默认不启用） Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows X...

CVE-2011-1968: Undefined Security Weakness

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service reboot by sending crafted RDP packets triggering access to an object that 1 was no...

PT-2011-3510

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description A denial of service issue exists due to improper processing of packets in memory by the Remote Desktop Protocol RDP implementation. This allows...

Microsoft Terminal Services Remote Denial Of Service (MS11-065; CVE-2011-1968)

This is a denial of service vulnerability. The vulnurability is caused due to a race condition created when the application is attempting to report an error. An attacker could trigger this flaw by repeatedly sending malicious rdp requests to an affected system. Successful exploitation may cause t...

Brocade BigIron RX switch ACL bypass vulnerability

Overview Brocade BigIron RX switch devices are susceptible to an access control list ACL bypass vulnerability by sending packets with the source port 179. Description Brocade BigIron RX switch devices do not properly restricted packets sent with a source port of 179. Port 179 is commonly used for...