NT Terminal Server Multiple Connection Request DoS Vulnerability

Solution:
Microsoft has released a Post-SP4 hotfix to deal with this issue. It can be downloaded at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40tse/hotfixes-postSP4/Flood-fix/

The patch causes the server to authenticate the requester before starting to open the connection.



 

Privacy Statement
Copyright 2010, SecurityFocus