Got a Windows VPS? PATCH NOW

NickM

There's a massive RDP vulnerability with a working exploit script. I figured I'd post the alert here, since I would imagine that most of the people here who have a Windows VPS are using RDP to manage it.

birdie25

ThrustVPS mailed me about this.

netomx

fuck, thanks for the advice, i will patch my company server

mikho

According to MS its 'only' targetting windows without NLA enabled.
Well... If NLA is enabled its a little harder to exploit.

MrAndroid

I bet that patch is a hack Microsoft made, most their security patches are dirty little hacks.

Kairus

@Daniel said: I bet that patch is a hack Microsoft made, most their security patches are dirty little hacks.

Better than nothing.

exussum

Is there a way to test ? I have a server on a Shared host that i more of inherited rather than anything with limited access (FTP really)

I mean i could download the expliot but i would prefer a quick / easy way if possible

netomx

@exussum said: download the expliot

where you can download the exploit?

Infinity

@Daniel said: I bet that patch is a hack Microsoft made, most their security patches are dirty little hacks.

Lots of companies do that.. If you think Microsoft is bad for that kinda stuff, check out the Antivirus companies.

exussum

@notomx you should be able to find it on Google. not sure if i should link to it.