Design/Logic Flaw

Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...

Out-of-bounds

Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation...

CVE-2017-5329

CVE-2017-5329 affects Palo Alto Networks Terminal Services Agent (Terminal Server Agent) prior to 7.0.7. It enables local privilege escalation via an out-of-bounds write, with reported impact to confidentiality, integrity, and availability (per CVSS 3.1: HIGH). Exploitation activity is documented...

CVE-2017-5328

Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...

CVE-2017-5329

Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation...

CVE-2017-5328

The CVE-2017-5328 entry concerns Palo Alto Networks Terminal Server Agent. Connected sources confirm a spoofing vulnerability that allows an attacker to impersonate another authenticated user, affecting Terminal Server Agent versions up to 7.0.6 (and potentially 6.0 per advisory, before 7.0.7). T...

Palo Alto Networks Terminal Services Agent 7.0.3-13 - Integer Overflow

/ Exploit Title - Palo Alto Networks Terminal Services Agent Integer Overflow Date - 26th January 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.paloaltonetworks.com/ Tested Version - 7.0.3-13 Driver Version - 6.0.7.0 - panta.sys Tested on OS - 32bit Windows 7 SP1 CVE...

CVE-2016-3985

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

Session fixation

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2016-3985

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

Support for Multiple Versions of MS Office on a Machine with Terminal Services Enabled

Scenario: We have Multiple Versions of Microsoft Office installed on the Master Image or vDisk and looking forward to activate both versions using KMS This scenario is not supported. Please refer Microsoft's KBhttps://support.microsoft.com/en-us/kb/2784668according to which : "We do not support t...

Raising the Dead

Posted by James Forshaw, your Friendly Neighbourhood Necromancer. It’s a bit late for Halloween but the ability to resurrect the dead processes that is is an interesting type of security issue when dealing with multi-user Windows systems such as Terminal Servers. Specifically this blog is about...

Windows Drivers are True’ly Tricky

Posted by James Forshaw, Driving for Bugs Auditing a product for security vulnerabilities can be a difficult challenge, and there’s no guarantee you’ll catch all vulnerabilities even when you do. This post describes an issue I identified in the Windows Driver code for Truecrypt, which has already...

Microsoft Terminal Services Use After Free (MS12-020)

Microsoft Windows操作系统是目前使用最广泛的操作系统之一，其远程桌面协议（Remote Desktop Protocol）被广泛用于用户远程管理计算机。近期在Windows操作系统的远程桌面协议中（Remote Desktop Protocol）被发现存在一个远程代码可执行漏洞。 在Windows XP 、Windows Server 2003 以及未开启网络层认证（Network Level Authentication）的Windows Vista 、Windows Server 2008 和Windows 7 中，只要操作系统开启Remote Desktop...

Windows RDP / Terminal Services Detection

Binary data 8191.prm...

Terminal Services Use SSL/TLS

The remote Terminal Services is configured to use SSL/TLS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64814; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/10"; scriptnameenglish:"Terminal Services Use SSL/TLS";...

Microsoft certificates vulnerability

Terminal Services activation certificate may be used to sign code on behalf of Microsoft...

MS KB2718704: Unauthorized Digital Certificates Could Allow Spoofing (deprecated)

The remote host is missing KB2718704, which updates the system's SSL certificate blacklist. Certificates issued by the Microsoft Terminal Services licensing certification authority can be used to sign code as Microsoft. An attacker could exploit this to spoof content or perform man-in-the-middle...

Terminal Services Doesn't Use Network Level Authentication (NLA) Only

Binary data rdpcredsspdetect.nbin...

Microsoft Terminal Services - Use-After-Free (MS12-020)

Microsoft Terminal Services - Use-After-Free MS12-020 Luigi Auriemma Application: Microsoft Terminal Services / Remote Desktop Services http://www.microsoft.com http://msdn.microsoft.com/en-us/library/aa383015v=vs.85.aspx Versions: any Windows version before 13 Mar 2012 Platforms: Windows Bug: us...