RDP TLS downgrade

For those using TLS with Microsoft's Terminal server. With Terminal server installed on Windows 2003 Server with current service packs and patches it is possible to bypass the server side setting that requires SSL with a self-signed cert. You will automatically be downgraded to not using TLS and...

CVE-2006-4309

VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions...

Microsoft RDP flaws could allow sniffing and DOS (Q324380)

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...

Microsoft RDP flaws could allow sniffing and DOS(Q324380)

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. Multiple security vulnerabilities have been found, one of them is a backdoor password 'jstwo' allowing complete access to the system. OpenVAS...

CVE-2005-1218

The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service crash via crafted Remote Desktop Protocol RDP requests...

CVE-2005-1218

CVE-2005-1218 describes a denial-of-service in the Microsoft Windows Remote Desktop Protocol (RDP) service affecting Windows 2000/XP/Server 2003. Root cause: an input-validation flaw in how RDP messages are processed, which could allow a remote attacker to crash the RDP service by sending a craft...

Microsoft Windows RDP protocol DoS

Bug in RDP protocol parsing causes system to crash and restart...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, enabling remote attackers to spoof server public keys and perform MITM. The root cause is improper verification during key exchange, allowing an attacker ...

CVE-2002-0864

CVE-2002-0864 corresponds to a Microsoft RDP flaw affecting Windows XP (RDP 5.1) where a Remote Desktop PDU Confirm Active packet that omits the Pattern BLT can cause a denial of service (crash). OpenVAS entries also describe an information-disclosure risk from RDP 5.0/5.1 due to unencrypted chec...

Windows RDP / Terminal Services Detection (deprecated)

Binary data 1153.prm...

eSeSIX Thintune backdoor

Backdoor on port TCP/25702, it's possible to obtain ICA and RDP usernames/passwords...

DoS attack on Windows 2000 Terminal Server

This one's short and simple.. Description ----------- Any user with sufficient permission to log on to a Windows 2000 Terminal Server via RDP or ICA and access its filesystem can reboot the server at will. Exploit ------- - Open SYSTEMROOTSYSTEM32MSGINA.DLL for exclusive access read lock. I used...

MS02-051: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (324380)

The remote host contains a version of the Remote Desktop protocol / service that could allow an attacker to crash the remote service and cause the system to stop responding. Another vulnerability could allow an attacker to disclose information. C Tenable Network Security, Inc. include"compat.inc"...

CVE-2002-0863

The CVE-2002-0863 issue concerns Microsoft RDP (Remote Desktop Protocol) 5.0 on Windows 2000 and 5.1 on Windows XP, where checksums of plaintext session data are not encrypted. This could allow a remote attacker to sniff encrypted sessions and potentially recover plaintext contents (information d...

Security Bulletin MS02-051: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (Q324380)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure Q324380 Released: 18 September 2002 Software: Microsoft Windows 2000 Microsoft Windows XP Impact: Two...

CVE-2001-1158

Affected software: Check Point VPN-1/FireWall-1 (version 4.0 and 4.1 per CERT) with the default macro accept_fw1_rdp in base.def. Vulnerability: A forged RDP header sent over UDP port 259 can bypass firewall restrictions, allowing traffic to arbitrary hosts. This is achieved by abusing RDP suppor...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...