CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...

PT-2005-1107

Name of the Vulnerable Software and Affected Versions Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 Description The issue concerns the storage of an RSA private key in mstlsapi.dll, which is used to sign a certificate. This allows remote attackers to spoof public keys of...

Remote Desktop Protocol Server Man-in-the-Middle Weakness

The remote version of the Remote Desktop Protocol Server Terminal Service is vulnerable to a man-in-the-middle MiTM attack. The RDP client makes no effort to validate the identity of the server when setting up encryption. An attacker with the ability to intercept traffic from the RDP server can...

Terminal Services Web Detection

Binary data 2508.prm...

Windows XP/Windows 2003 DoS

Flood with WinKey+U from consoles or via RDP before logon causes memory exhaustion...

Terminal Services Web Detection

The remote host appears to be configured to facilitate the client download of an ActiveX Terminal Services Client. So, users can access the web page and click a 'connect' button which will prompt a client-side download of a .cab file which will be used to connect the client directly to a terminal...

Microsoft Windows Remote Desktop Protocol (RDP) uses weak algorithm for encrypting packets

Overview Microsoft Windows Remote Desktop Protocol RDP uses a weak algorithm for encrypting packets. Description Microsoft describes RDP as follows.RDP is based on, and is an extension of, the T.120 protocol family standards. It is a multichannel-capable protocol that allows for separate virtual...

Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities

Vulnerable All versions of Microsoft Windows using encrypted RDP are vulnerable to the checksum vulnerability. The following versions are also vulnerable to the keystroke vulnerability: Microsoft Windows XP Professional Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsof...

Remote Desktop Protocol Service Detection

The Remote Desktop Protocol allows a user to remotely obtain a graphical login and therefore act as a local user on the remote host. If an attacker gains a valid login and password, this service could be used to gain further access on the remote host. An attacker may also use this service to moun...

CVE-2001-0663

Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol RDP packets...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2001-0663

Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol RDP packets...

Security Update for Windows Server 2003 (KB899591)

A security issue has been identified in the Remote Desktop Protocol RDP that could allow an attacker to remotely cause your Microsoft Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows XP (KB899591)

A security issue has been identified in the Remote Desktop Protocol RDP that could allow an attacker to remotely cause your Microsoft Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows Server 2003 x64 Edition (KB899591)

A security issue has been identified in the Remote Desktop Protocol RDP that could allow an attacker to remotely cause your Microsoft Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows 2000 (KB899591)

A security issue has been identified in the Remote Desktop Protocol RDP that could allow an attacker to remotely cause your Microsoft Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...