PT-2014-1027

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Description The issue is related to a tampering vulnerability in the Remote Desktop Protocol RDP implementation, which do...

Microsoft Windows Remote Desktop Protocol CVE-2014-0296 Security Bypass Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows...

DUO-PSA-2014-005: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-005 Publication Date: 2014-05-12 Revision Date: 2014-05-27 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified an issue in its Credential-Provider based Remote Desktop Protocol RDP integrations e.g. those...

DUO-PSA-2014-005: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-005 Publication Date: 2014-05-12 Revision Date: 2014-05-27 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified an issue in its Credential-Provider based Remote Desktop Protocol RDP integrations e.g. those...

DUO-PSA-2014-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-003 Publication Date: 2014-01-27 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in which it is possible to bypass second factor authentication of Remote Desktop Protocol RDP integrations which are...

DUO-PSA-2014-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-003 Publication Date: 2014-01-27 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue in which it is possible to bypass second factor authentication of Remote Desktop Protocol RDP integrations which are...

Microsoft Remote Desktop Protocol Security Advisory (2861855)

This host is missing an important security update according to Microsoft advisory 2861855. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft discontinues MD5 crypto for digital certificates to improve RDP Authentication

This week Microsoft has released several advisories to help their users update from weak crypto. Microsoft is beginning the process of discontinuing support for digital certificates that use the MD5 hashing algorithm and to improve the network-level authentication for the Remote Desktop Protocol...

MS KB2861855: Updates to Improve Remote Desktop Protocol Network-Level Authentication

The remote host is missing Microsoft KB2861855. This update provides defense-in-depth measures for Remote Desktop Protocol Network Level Authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69333; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15 20:50:28"...

Microsoft Security Advisory: Updates to improve Remote Desktop Protocol network-level authentication: August 13, 2013

None None...

KINS Banking Trojan For Sale in Underground Forum

It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...

Oracle Linux 3 : rdesktop (ELSA-2008-0576)

From Red Hat Security Advisory 2008:0576 : Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft...

UBUNTU-CVE-2013-4078

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Microsoft Windows Remote Desktop Protocol Denial of Service (MS05-041) - High Confidence (CVE-2005-1218)

A vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP. Remote Desktop Protocol RDP lets users create a virtual session on their desktop computers, allowing them to access all the data and applications on their computers. To trigger the vulnerability, an attacker could send a...

Microsoft Remote Desktop ActiveX控件远程代码执行漏洞(CVE-2013-1296)(MS13-029)

BUGTRAQ ID: 58874 CVECAN ID: CVE-2013-1296 远程桌面协议（RDP, Remote Desktop Protocol）是一个多通道（multi-channel）的协议，让用户（客户端或称“本地电脑”）连上提供微软终端机服务的电脑（服务器端或称“远程电脑”）。 当远程桌面 ActiveX 控件 mstscax.dll 尝试访问内存中已被删除的对象时，存在一个远程执行代码漏洞。攻击者可通过诱使用户访问特制网页来利用该漏洞。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 0 Microsoft Windows XP Microsoft...

Terminal Services Use SSL/TLS

The remote Terminal Services is configured to use SSL/TLS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64814; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/10"; scriptnameenglish:"Terminal Services Use SSL/TLS";...

Microsoft Remote Desktop Protocol Memory Corruption Vulnerability

Overview ICS-CERT is aware of a public report of a Remote Desktop Protocol RDP vulnerability with proof-of-concept PoC exploit code affecting multiple Microsoft Windows operating systems. RDP is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to...

Russians selling access to private company servers in just $4

We have already seen vulnerability in Remote Desktop Protocol RDP is a potential dangers of desktop remote-access tools commonly used by IT departments to handle help-desk issues and by administrators to manage virtualized machines. According to reports from krebsonsecurity, A Russian company...

rdesktop: Directory Traversal

Background rdesktop is a Remote Desktop Protocol RDP Client. Description A vulnerability has been discovered in rdesktop. Please review the CVE identifier referenced below for details. Impact Remote RDP servers may be able to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2012-2526

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."...