CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, enabling remote attackers to spoof server public keys and perform MITM. The root cause is improper verification during key exchange, allowing an attacker ...

CVE-2002-0864

CVE-2002-0864 corresponds to a Microsoft RDP flaw affecting Windows XP (RDP 5.1) where a Remote Desktop PDU Confirm Active packet that omits the Pattern BLT can cause a denial of service (crash). OpenVAS entries also describe an information-disclosure risk from RDP 5.0/5.1 due to unencrypted chec...

Windows RDP / Terminal Services Detection (deprecated)

Binary data 1153.prm...

eSeSIX Thintune backdoor

Backdoor on port TCP/25702, it's possible to obtain ICA and RDP usernames/passwords...

DoS attack on Windows 2000 Terminal Server

This one's short and simple.. Description ----------- Any user with sufficient permission to log on to a Windows 2000 Terminal Server via RDP or ICA and access its filesystem can reboot the server at will. Exploit ------- - Open SYSTEMROOTSYSTEM32MSGINA.DLL for exclusive access read lock. I used...

MS02-051: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (324380)

The remote host contains a version of the Remote Desktop protocol / service that could allow an attacker to crash the remote service and cause the system to stop responding. Another vulnerability could allow an attacker to disclose information. C Tenable Network Security, Inc. include"compat.inc"...

CVE-2002-0863

The CVE-2002-0863 issue concerns Microsoft RDP (Remote Desktop Protocol) 5.0 on Windows 2000 and 5.1 on Windows XP, where checksums of plaintext session data are not encrypted. This could allow a remote attacker to sniff encrypted sessions and potentially recover plaintext contents (information d...

Security Bulletin MS02-051: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (Q324380)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure Q324380 Released: 18 September 2002 Software: Microsoft Windows 2000 Microsoft Windows XP Impact: Two...

CVE-2001-1158

Affected software: Check Point VPN-1/FireWall-1 (version 4.0 and 4.1 per CERT) with the default macro accept_fw1_rdp in base.def. Vulnerability: A forged RDP header sent over UDP port 259 can bypass firewall restrictions, allowing traffic to arbitrary hosts. This is achieved by abusing RDP suppor...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...

DoS против Windows NT/2000 через Terminal Service (Invalid RDP Data, memory leak)

Определенная последовательность RDP-пакетов приводит к полному зависанию сервера, имеются утечки памяти...

Security Bulletin MS01-052

---------------------------------------------------------------------- Title: Invalid RDP Data can Cause Terminal Service Failure Date: 18 October 2001 Software: Windows NT 4.0 Server, Terminal Server Edition, Windows 2000 Server and Advanced Server Impact: Denial of service Max Risk: Moderate...

Microsoft Windows NT2000 - Terminal Server Service RDP Denial of Service

Microsoft Windows NT2000 - Terminal Server Service RDP Denial of Service source: https://www.securityfocus.com/bid/3445/info Due to a flaw in the implementation of RDP in Windows 2000/NT Terminal Server, it is possible for a remote user to cause a host to stop responding. Sending malformed RDP...

Microsoft Windows NT/2000 - Terminal Server Service RDP Denial of Service

source: https://www.securityfocus.com/bid/3445/info Due to a flaw in the implementation of RDP in Windows 2000/NT Terminal Server, it is possible for a remote user to cause a host to stop responding. Sending malformed RDP packets to a host could cause a denial of services, potentially impacting t...

Security Bulletin MS01-040

---------------------------------------------------------------------- Title: Invalid RDP Data Can Cause Memory Leak in Terminal Services Date: 25 July 2001 Software: Windows 2000 Server and Windows NT 4.0, Terminal Server Edition Impact: Denial of Service Bulletin: MS01-040 Microsoft encourages...

Обход checkpoint через RDP-пакеты (protection bypass)

В конфигурации по-умолчанию пропускаются RDP-пакеты UDP/259...

FW-1 RDP Vulnerability Proof of Concept Code

As announced earlier this week, we hereby post the proof of concept code for the FireWall-1 RDP Bypass Vulnerability. We think it doesn't make sense to withhold it any longer for the following reasons. 1. This is no "Script-Kiddie" exploit, it will not provide anyone with a means to instantly bre...

Check Point FireWall-1 RDP Bypass Vulnerability

FOR PUBLIC RELEASE ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 1.2 2001-07-09 ------------------------------------------------------------------------ The latest version of this document is available at...

Advisory CA-2001-17

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-17 Check Point RDP Bypass Vulnerability Original release date: July 09, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Check Point VPN-1 and FireWall-1 Version 4.1 Overview A...