824 matches found
Default credentials
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
UBUNTU-CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
DEBIAN-CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...
CVE-2013-1430
CVE-2013-1430 affects xrdp before 0.9.1, where after a successful RDP login xrdp creates the file ~/.vnc/sesman_${username}_passwd containing the user’s cleartext password encrypted with DES using a known key. This exposes credentials on the server side. Public notices and vendor advisories (e.g....
Fedora Update for xrdp FEDORA-2015-11688
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : xrdp-0.9.0-4.fc22 (2015-11688)
Add epoch again. New version. Close bug 1105202 again. Own /etc/xrdp/pulse directory. Reapply service file changes again. Fix sesman default configuration again. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...
[SECURITY] Fedora 21 Update: xrdp-0.6.1-11.fc21
The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients...
Fedora Update for xrdp FEDORA-2015-11756
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : xrdp-0.6.1-11.fc21 (2015-11756)
Attempt to fix this DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
XRDP <= 0.4.1 - Remote Buffer Overflow PoC (pre-auth)
No description provided by source. / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient!...
SuSE 11.2 Security Update : xrdp (SAT Patch Number 6511)
The XRDP service was changed so that the default crypto level in XRDP was changed from 'low' to 'high'. This switches from using a 40 bit encryption to a 128 bit two-way encryption. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE Security Update : xrdp (xrdp-458)
This update fixes multiple buffer overflows that can be exploited remotely to execute arbitrary code. CVE-2008-5902, CVE-2008-5903, CVE-2008-5904 Additionally xrdp does not register remote session as local anymore. Please note, the previous update was missing the patch. %NASLMINLEVEL 70300 C...
openSUSE Security Update : xrdp (xrdp-443)
This update fixes multiple buffer overflows that can be exploited remotely to execute arbitrary code. Additionally xrdp does not register remote session as local anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
XRDP <= 0.4.1 Remote Buffer Overflow PoC (pre-auth)
No description provided by source. / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient!...
XRDP <= 0.4.1 Remote Buffer Overflow PoC (pre-auth)
Exploit for linux platform in category dos / poc =================================================== XRDP = 0.4.1 Remote Buffer Overflow PoC pre-auth =================================================== / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 email protected:/xrdp...
XRDP 0.4.1 - Remote Buffer Overflow (PoC)
/ XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient! It takes about a minute, the RDP...