In Remotedesktopdienste (Remote Desktop Services, RDS) besteht eine Sicherheitsanf\u00e4lligkeit bez\u00fcglich Remotecodeausf\u00fchrung f\u00fcr folgende betroffenen Windows-Plattformen:
– Windows XP SP3
– Windows Server 2003 SP2
– Windows Server 2003 SP2 R2
– Windows XP Professional x64 Edition SP2
– Windows XP Embedded SP3
– Windows Embedded POSReady 2009
– Windows Embedded Standard 2009<\/p>\n\n\n\n
Bei Remotedesktopdienste (ehemals Terminaldienste) liegt eine Sicherheitsanf\u00e4lligkeit bez\u00fcglich Remotecodeausf\u00fchrung vor, wenn ein nicht authentifizierter Angreifer \u00fcber RDP eine Verbindung mit dem Zielsystem herstellt und speziell gestaltete Anforderungen sendet. Diese Sicherheitsanf\u00e4lligkeit existiert vor der Authentifizierung und erfordert keine Benutzerinteraktion. Ein Angreifer, der diese Sicherheitsanf\u00e4lligkeit erfolgreich ausnutzt, kann auf dem Zielsystem beliebigen Code ausf\u00fchren. Der Angreifer k\u00f6nnte dann Programme installieren, Daten anzeigen, \u00e4ndern oder l\u00f6schen oder neue Konten mit uneingeschr\u00e4nkten Benutzerrechten erstellen.<\/p>\n\n\n\n
Um diese Sicherheitsanf\u00e4lligkeit auszunutzen, muss ein Angreifer eine speziell gestaltete Anforderung \u00fcber RDP an Remotedesktopdienste der Zielsysteme senden.<\/p>\n\n\n\n
Das Update behebt die Sicherheitsanf\u00e4lligkeit, indem korrigiert wird, wie Remotedesktopdienste Verbindungsanforderungen verarbeitet.<\/p>\n\n\n\n
Weitere Informationen zu dieser Ver\u00f6ffentlichung finden Sie unter 4500705<\/a>. Weitere Informationen zu dieser Sicherheitsanf\u00e4lligkeit finden Sie unter CVE-2019-0708<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" In Remotedesktopdienste (Remote Desktop Services, RDS) besteht eine Sicherheitsanf\u00e4lligkeit bez\u00fcglich Remotecodeausf\u00fchrung f\u00fcr folgende betroffenen Windows-Plattformen:– Windows XP SP3– Windows Server 2003 SP2– Windows Server 2003 SP2 R2– Windows XP Professional x64 Edition SP2– Windows XP Embedded SP3– Windows Embedded POSReady 2009– Windows Embedded Standard 2009 Bei Remotedesktopdienste (ehemals Terminaldienste) liegt eine Sicherheitsanf\u00e4lligkeit bez\u00fcglich Remotecodeausf\u00fchrung vor, […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_front_end_style_editor":"no","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"0","ocean_second_sidebar":"0","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"0","ocean_custom_header_template":"0","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"0","ocean_menu_typo_font_family":"0","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"0","osp_disable_panel":"default","osh_disable_topbar_sticky":"default","osh_disable_header_sticky":"default","osh_sticky_header_style":"default","osh_sticky_header_effect":"","osh_custom_sticky_logo":0,"osh_custom_retina_sticky_logo":0,"osh_custom_sticky_logo_height":0,"osh_background_color":"","osh_links_color":"","osh_links_hover_color":"","osh_links_active_color":"","osh_links_bg_color":"","osh_links_hover_bg_color":"","osh_links_active_bg_color":"","osh_menu_social_links_color":"","osh_menu_social_hover_links_color":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"off","ocean_gallery_id":[],"footnotes":""},"categories":[9,44,39,7,16,36],"tags":[],"class_list":["post-833","post","type-post","status-publish","format-standard","hentry","category-__news","category-security","category-server-2003","category-sicherheit","category-windows","category-winxp","entry"],"_links":{"self":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/comments?post=833"}],"version-history":[{"count":0,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/833\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/media?parent=833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/categories?post=833"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/tags?post=833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}