Investments

Vulnerability in Remote Desktop Protocol

July 18, 2005

US-CERT is aware of a vulnerability in Microsoft's Remote Desktop Protocol (RDP). Services that utilize the Remote Desktop Protocol (i.e., Terminal Services, Remote Desktop Services, Remote Assistance) could be affected.
By sending a specially crafted RDP request, a remote attacker could cause a denial-of-service condition on an affected system. We have no evidence of successful exploitation of this vulnerability. With the exception of Windows XP Media Center Edition, services that utilize the Remote Desktop Protocol are not enabled by default.

Microsoft has published a Security Advisory about this issue and is continuing to investigate the problem ( http://www.microsoft.com/technet/security/advisory/904797.mspx ). Until a patch is available to address this vulnerability, US-CERT strongly encourages users to review the workarounds section of the Microsoft Security Advisory.


- http://www.us-cert.gov/current/

[ Comment, Edit or Article Submission ]