2198 matches found
Microsoft Windows: Client connection encryption level (Remote Desktop Services)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrdhostclientencrlevel.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Set client connection encryption level Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...
Microsoft Windows: Service: Remote Desktop Services UserMode Port Redirector
The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109272";...
MITM RDP Connections: Seth
Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials. It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests, workshops...
CVE-2017-2835
An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to...
CVE-2017-2835
An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to...
CVE-2017-2835
CVE-2017-2835 : An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP, specifically in versions around 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write, leading to an exploitable condition. An attacker could compr...
CVE-2017-2835
Removed by vendor...
CVE-2018-0976
The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...
Microsoft Windows Multiple Vulnerabilities (KB4093118)
This host is missing a critical security update according to Microsoft KB4093118 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA11221 Multiple vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities have been found in Microsoft Windows . Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service and possibly to bypass security restrictions. Below is a complete list of...
Security Updates for Windows Server 2008 (April 2018)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...
KLA11896 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...
Microsoft Windows Remote Desktop Protocol CVE-2018-0976 Denial of Service Vulnerability
Description Microsoft Windows Remote Desktop Protocol is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...
LockCrypt ransomware: weakness in code can lead to recovery
At the start of the year, it seemed that 2018 was going to be all about cryptominers. They so overwhelmingly dominated the landscape that it looked like no other threat had a chance. However, ransomware is not giving up the field so fast. There have been new variants popping up every couple of...
Microsoft Windows CredSSP MITM Remote Code Execution (CVE-2018-0886)
A remote code execution vulnerability exists in CredSSP. The vulnerability due to how CredSSP validates request during the authentication process. A remote attacker can exploit this vulnerability by sending a specially crafted RDP request to the target...
CredSSP Flaw in Remote Desktop Protocol Affects All Versions of Windows
A critical vulnerability has been discovered in Credential Security Support Provider protocol CredSSP that affects all versions of Windows to date and could allow remote attackers to exploit RDP and WinRM to steal data and run malicious code. CredSSP protocol has been designed to be used by RDP...
[SECURITY] Fedora 27 Update: xrdp-0.9.5-1.fc27
xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...
[SECURITY] Fedora 26 Update: xrdp-0.9.5-1.fc26
xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...
Gain Windows privileges with FortiClient vpn before logon and untrusted certificate
When the "VPN before logon" feature of FortiClient Windows is enabled disabled by default, and when the server certificate is not valid, it is possible for an attacker without a user account on the targeted Windows workstation to obtain SYSTEM level privileges, via exploiting the Windows "securi...