VirtualBox

Ticket #5870 (closed defect: fixed)

Opened 4 years ago

Last modified 2 years ago

VRDP does not support RDP5.2

Reported by: goldeneyexs Owned by:
Priority: major Component: RDP
Version: VirtualBox 3.1.2 Keywords: RDP5.1, RDP5.2, Man in the middle
Cc: Guest type: other
Host type: other

Description

According to the VBox manual vrdp section at:  http://www.virtualbox.org/manual/UserManual.html#vrdp-crypt

VBox only support RDP5.1, as no configuration options for RDP5.2 are exposed to the user.

RDP5.1 as the manual says is not secure and is vulnerable to a MITM attack (detailed here:  http://www.oxid.it/ca_um/topics/apr-rdp.htm).

Please add RDP5.2 support to VBox to provide some sort of machine authentication.

Change History

comment:1 Changed 2 years ago by frank

  • Status changed from new to closed
  • Resolution set to fixed

RDP 5.2 was implemented some time ago. VBox 4.1.6 has it.

Note: See TracTickets for help on using tickets.

www.oracle.com
ContactPrivacy policyTerms of Use