820 matches found
UBUNTU-CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
CVE-2013-1430 affects xrdp before 0.9.1, where after a successful RDP login xrdp creates the file ~/.vnc/sesman_${username}_passwd containing the user’s cleartext password encrypted with DES using a known key. This exposes credentials on the server side. Public notices and vendor advisories (e.g....
Fedora 22 : xrdp-0.9.0-4.fc22 (2015-11688)
Add epoch again. New version. Close bug 1105202 again. Own /etc/xrdp/pulse directory. Reapply service file changes again. Fix sesman default configuration again. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...
Fedora Update for xrdp FEDORA-2015-11688
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: xrdp-0.6.1-11.fc21
The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients...
Fedora 21 : xrdp-0.6.1-11.fc21 (2015-11756)
Attempt to fix this DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for xrdp FEDORA-2015-11756
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XRDP <= 0.4.1 - Remote Buffer Overflow PoC (pre-auth)
No description provided by source. / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient!...
SuSE 11.2 Security Update : xrdp (SAT Patch Number 6511)
The XRDP service was changed so that the default crypto level in XRDP was changed from 'low' to 'high'. This switches from using a 40 bit encryption to a 128 bit two-way encryption. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE Security Update : xrdp (xrdp-458)
This update fixes multiple buffer overflows that can be exploited remotely to execute arbitrary code. CVE-2008-5902, CVE-2008-5903, CVE-2008-5904 Additionally xrdp does not register remote session as local anymore. Please note, the previous update was missing the patch. %NASLMINLEVEL 70300 C...
openSUSE Security Update : xrdp (xrdp-443)
This update fixes multiple buffer overflows that can be exploited remotely to execute arbitrary code. Additionally xrdp does not register remote session as local anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
XRDP <= 0.4.1 Remote Buffer Overflow PoC (pre-auth)
No description provided by source. / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient!...
XRDP <= 0.4.1 Remote Buffer Overflow PoC (pre-auth)
Exploit for linux platform in category dos / poc =================================================== XRDP = 0.4.1 Remote Buffer Overflow PoC pre-auth =================================================== / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 email protected:/xrdp...
XRDP 0.4.1 - Remote Buffer Overflow (PoC)
/ XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient! It takes about a minute, the RDP...
XRDP 0.4.1 - Remote Buffer Overflow (PoC)
XRDP 0.4.1 - Remote Buffer Overflow PoC / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be...
XRDP 0.4.1 Buffer Overflow
/ XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient! It takes about a minute, the RDP...
CVE-2008-5904
The rdprdpprocesscolorpointerpdu function in rdp/rdprdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow...
Code injection
Array index error in the xrdpbitmapdefproc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the editpos structure member...