VULHUB ™

An issue exists in Terminal Services, which could allow a user to have a false IP addresss logged. When a client connects, the client host name and network address are transmitted from the client to the server as part of the Remote Desktop Protocol. The server records this information when logging the client connection, rather than obtaining the actual network address of the client host from the operating system's TCP/IP implementation.

An issue exists in Terminal Services, which could allow a user to have a false IP addresss logged. When a client connects, the client host name and network address are transmitted from the client to the server as part of the Remote Desktop Protocol. The server records this information when logging the client connection, rather than obtaining the actual network address of the client host from the operating system's TCP/IP implementation.