SUSE-SU-2020:1991-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch - Update patch: + xrdp-Allow-sessions-with-32-bpp.patch.patch...

openSUSE Security Update : xrdp (openSUSE-2020-999)

This update for xrdp fixes the following issues : - Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch This update was imported from the SUSE:SLE-15:Updat...

SUSE SLES12 Security Update : xrdp (SUSE-SU-2020:1943-1)

This update for xrdp provides the following fix : CVE-2020-4044: xrdp-sesman can be crashed remotely over port 3350 bsc1173580. Fixed an issue where xrdp-sesman could not restart bsc1155952. Fixed an issue where xrdp could not start due to an error in the service file use absolute path in ExecSta...

openSUSE: Security Advisory for xrdp (openSUSE-SU-2020:0999-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0999-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch This update was imported from the SUSE:SLE-15:Update update...

Security update for xrdp (important)

openSUSE Security Update: Security update for xrdp Announcement ID: openSUSE-SU-2020:0999-1 Rating: important References: 1173580 Cross-References: CVE-2020-4044 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for xrdp fixes...

SUSE-SU-2020:1943-1 Security update for xrdp

This update for xrdp provides the following fix: - CVE-2020-4044: xrdp-sesman can be crashed remotely over port 3350 bsc1173580. - Fixed an issue where xrdp-sesman could not restart bsc1155952. - Fixed an issue where xrdp could not start due to an error in the service file use absolute path in...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:1933-1)

This update for xrdp fixes the following issues : Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : xrdp (SUSE-SU-2020:1918-1)

This update for xrdp fixes the following issues : Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch Note that Tenable Network Security has extracted the...

Capsulecorp-Pentest - Vagrant VirtualBox Environment For Conducting An Internal Network Penetration Test

Vagrant VirtualBox Environment For Conducting An Internal Network Penetration Test. 1. Capsulecorp Pentest The Capsulecorp Pentest is a small virtual network managed by vagrant and ansible. It contains five virtual machines, including one Linux attacking system running xubuntu and 4 Windows 2019...

SUSE-SU-2020:1933-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch...

SUSE-SU-2020:1918-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch...

Fedora: Security Advisory for xrdp (FEDORA-2020-9c26a458ae)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for xrdp (FEDORA-2020-9666e4c9cd)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: xrdp-0.9.13.1-1.fc31

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 32 Update: xrdp-0.9.13.1-1.fc32

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora 32 : 1:xrdp (2020-9666e4c9cd)

This is a security fix release that includes fixes for the following local buffer overflow vulnerability. - CVE-2020-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it This update is recommended for all xrdp users. Note that Tenable...

Fedora 31 : 1:xrdp (2020-9c26a458ae)

This is a security fix release that includes fixes for the following local buffer overflow vulnerability. - CVE-2020-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it This update is recommended for all xrdp users. Note that Tenable...

xrdp-sesman service buffer overflow vulnerability

xrdp-sesman service is an open source RDP Remote Desktop Protocol server. A buffer overflow vulnerability exists in xrdp-sesman service versions prior to 0.9.13.1, which can be exploited by a remote attacker to execute arbitrary code on a system or cause an application to crash denial of service ...

FreeBSD : xrdp -- Local users can perform a buffer overflow attack against the xrdp-sesman service and then inpersonate it (2675f0db-baa5-11ea-aa12-80ee73419af3)

Ashley Newson reports : The xrdp-sesman service can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. C Tenab...