Free Republic

[dayglored's note: This is direct from the horse's mouth, Microsoft Technet. It's a bad one, like the WannaCry malware from a couple years ago.] Today [May 14] Microsoft released fixes for a critical Remote Code Execution vulnerability, CVE-2019-0708, in Remote Desktop Services – formerly known as Terminal Services – that affects some older versions of Windows. The Remote Desktop Protocol (RDP) itself is not vulnerable. This vulnerability is pre-authentication and requires no user interaction. In other words, the vulnerability is ‘wormable’, meaning that any future malware that exploits this vulnerability could propagate from vulnerable computer to vulnerable computer in a...

Black Hat Asia Microsoft will prevent Windows Server from authenticating RDP clients that have not been patched to address a security flaw that can be exploited by miscreants to hijack systems and laterally move across a network.The bug, CVE-2018-0886, was fixed in March's Patch Tuesday software update, and involves Microsoft's implementation of its Credential Security Support Provider protocol (CredSSP). A miscreant-in-the-middle on a corporate network can abuse the flaw to send arbitrary commands to a server to execute while masquerading as a legit user or admin.From there, lateral movement through an intranet becomes possible, and that’s just the sort of...

Full read/write access was there for the taking Microsoft has patched a code execution hole in its Mac remote desktop client that grants read and write to home directories if users do no more than click a link, says Italian security researcher Filippo Cavallarin. The hole was patched 17 January. Cavallarin says the flaw allowed remote attackers to execute arbitrary code on vulnerable machines if users did not more than click phishing links. From there, attackers would gain read and write access to Mac home directories. "Microsoft Remote Desktop Client for Mac OS X allows a malicious terminal server to...

Today the folks at Parallels have unveiled Parallels 2X Remote Application Server, the first RDP Client for Raspberry Pi. This system will enable Raspberry Pi users to access Windows virtual applications and Remote Desktops alike. With Parallels 2X RAS, as they also call it, users will have the ability to deliver applications to any device - Chromebooks, Windows PCs, Mac computers, Android, iOS, Windows Phone, Linux workstations, HTML5 browsers and of course, strangest and most awesome of all, the device family known as Raspberry Pi...

I'm trying to get Remote Desktop on my home network to work. I have 2 desktops and 2 laptops. One desktop is my main box and I have 4 screens and use it to serve media to my TV over a web box. I have 6 drives on it and it needs lots of maintenance. I can remote each laptop and the other desktop from each other, but I can't access my main box from anywhere. I've done all the help fixes, but no joy yet. I can even access the laptops and other box from my main desktop, but...

I just experienced virtualization in a computer lab environment. The PC’s use VMWare Workstation and have a virtual machine with Windows XP Pro and Office 2007 and another virtual machine with Windows XP Pro and Office 200. I'm thinking very seriously about purchasing VMWare Workstation or possibly installing equivalent open source virtualization software. My goal is to upgrade my Dell (Inspiron 530 Intel Core2 processor Q6600 (2.40Ghz 1066FSB) w/Quad Core Technology and 8MB cache and 4GB DDR2 SDRAM at 800MHz) with Windows 7 Ultimate 64 bit and install virtualization as well. But, before I take the plunge I have many...