168 matches found
CVE-2017-5329
Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation...
CVE-2017-5328
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
CVE-2017-5328
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
Out-of-bounds
Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation...
Design/Logic Flaw
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
CVE-2017-5329
CVE-2017-5329 affects Palo Alto Networks Terminal Services Agent (Terminal Server Agent) prior to 7.0.7. It enables local privilege escalation via an out-of-bounds write, with reported impact to confidentiality, integrity, and availability (per CVSS 3.1: HIGH). Exploitation activity is documented...
CVE-2017-5328
The CVE-2017-5328 entry concerns Palo Alto Networks Terminal Server Agent. Connected sources confirm a spoofing vulnerability that allows an attacker to impersonate another authenticated user, affecting Terminal Server Agent versions up to 7.0.6 (and potentially 6.0 per advisory, before 7.0.7). T...
CVE-2017-5328
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
CVE-2017-5329
Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation...
Palo Alto Networks Terminal Services Agent 7.0.3-13 - Integer Overflow
/ Exploit Title - Palo Alto Networks Terminal Services Agent Integer Overflow Date - 26th January 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.paloaltonetworks.com/ Tested Version - 7.0.3-13 Driver Version - 6.0.7.0 - panta.sys Tested on OS - 32bit Windows 7 SP1 CVE...
CVE-2016-3985
The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...
Session fixation
The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...
CVE-2016-3985
The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...
Support for Multiple Versions of MS Office on a Machine with Terminal Services Enabled
Scenario: We have Multiple Versions of Microsoft Office installed on the Master Image or vDisk and looking forward to activate both versions using KMS This scenario is not supported. Please refer Microsoft's KBhttps://support.microsoft.com/en-us/kb/2784668according to which : "We do not support t...
Raising the Dead
Posted by James Forshaw, your Friendly Neighbourhood Necromancer. It’s a bit late for Halloween but the ability to resurrect the dead processes that is is an interesting type of security issue when dealing with multi-user Windows systems such as Terminal Servers. Specifically this blog is about...
Windows Drivers are True’ly Tricky
Posted by James Forshaw, Driving for Bugs Auditing a product for security vulnerabilities can be a difficult challenge, and there’s no guarantee you’ll catch all vulnerabilities even when you do. This post describes an issue I identified in the Windows Driver code for Truecrypt, which has already...
Microsoft Terminal Services Use After Free (MS12-020)
Microsoft Windows操作系统是目前使用最广泛的操作系统之一，其远程桌面协议（Remote Desktop Protocol）被广泛用于用户远程管理计算机。近期在Windows操作系统的远程桌面协议中（Remote Desktop Protocol）被发现存在一个远程代码可执行漏洞。 在Windows XP 、Windows Server 2003 以及未开启网络层认证（Network Level Authentication）的Windows Vista 、Windows Server 2008 和Windows 7 中，只要操作系统开启Remote Desktop...
Windows RDP / Terminal Services Detection
Binary data 8191.prm...
Terminal Services Use SSL/TLS
The remote Terminal Services is configured to use SSL/TLS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64814; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/10"; scriptnameenglish:"Terminal Services Use SSL/TLS";...
