165 matches found
CVE-2002-1749
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges...
Windows RDP / Terminal Services Detection (deprecated)
Binary data 1153.prm...
Terminal Services Web Detection
Binary data 2508.prm...
Terminal Services Web Detection
The remote host appears to be configured to facilitate the client download of an ActiveX Terminal Services Client. So, users can access the web page and click a 'connect' button which will prompt a client-side download of a .cab file which will be used to connect the client directly to a terminal...
CVE-2003-1544
Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service reboot by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded...
Windows 2000 multiple bugs
Windows 2000 Internet Key Exchange Selects Incorrect Certificate, Update to Help Prevent Cross-Forest Certificate Enrollment, Update to Verify cbDestLength in the Imaadpcm Component, Zones Removed from the Registry When You Start the DNS Service, Account Replication Latency Causes Certificate...
CVE-2002-0726
Buffer overflow in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to execute arbitrary code via a long server name field...
CVE-2002-1749
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges...
CVE-2002-1795
Cross-site scripting XSS vulnerability in connect.asp in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2002-1933
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window...
CVE-2002-0726
Buffer overflow in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to execute arbitrary code via a long server name field...
CVE-2001-0860
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...
EUVD-2001-0843
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...
CVE-2001-0860
The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...
CVE-2001-0860
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...
Security Bulletin MS01-006
---------------------------------------------------------------------- Title: Patch Available for "Invalid RDP Data" Vulnerability Date: 31 January 2001 Software: Windows 2000 Terminal Services Impact: Denial of Service Bulletin: MS01-006 KB Article: Q286132 Available Soon Microsoft encourages...
Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98
Здравствуйте , Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98 Network World http://www.nwfusion.com Если Вы работаете на сервере Windows 2000 с установленным терминальным сервисом Terminal Services, то должны знать о его потенциальной...
Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98
При подключении нескольких пользователей с одной машины например, при использовании Terminal Services к ресурсу Windows 95/98, не устанавливается дополнительных сеансов к ресурсу, что позволяет получить второму пользователю доступ с правами первого пользователя...
