NLA is not really required to address this issue, Microsoft has allready 
released two patches
for the MS12-020 security vulnerability last tuesday.

If you are concerned , apply these patches and move along.

And btw, the pastebin from s...@fbi.gov was BS and has allready
been debunked. was someones idea of a cute prank.

Wasnt even original code, the exploit code was ripped from some other
unrelated POC and the Payload was from a totally different POC.

Total BS, just make sure your windows machines are patched you
should be fine.





On 03/19/2012 04:01 PM, Stéphane Graber wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 03/19/2012 01:53 PM, David Burgess wrote:
>    
>> All this excitement about RDP vulnerabilities has made me wonder
>> about LTSP and RDP. Specifically, whether it is possible to use the
>> supposedly more secure Network Level Authentication in Server
>> 2008/R2. I'm pretty sure rdesktop can't do this, but some quick
>> googling suggests that FreeRDP can:
>> http://www.freerdp.com/2012/01/16/freerdp-1-0-released/.
>>
>> Has anybody tried FreeRDP with LTSP? Does anybody have any other
>> thoughts on NLA with LTSP or Linux clients in general?
>>
>> db
>>      
> LTSP has been supporting xfreerdp for a while now and it'll be the
> default in 12.04.
>
> If I remember correctly, NLA is the default for xfreerdp. I expect
> some people will need to adapt their RDP_OPTIONS to work with xfreerdp
> using a recent LTSP but besides that, it should be working at least as
> well as rdesktop.
>
> - -- 
> Stéphane Graber
> Ubuntu developer
> http://www.ubuntu.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBCgAGBQJPZ7q4AAoJEMY4l01keS1nilMQAIqqSHg2BscJpQ7P0KEcMHjv
> psxKCGh/nZKbeEhREuzINaxENe07wv2AD9dUZ/jzOj77vhzVCVdtkYyH3DHTi1qm
> SLJF6kS2a5YNKJdkZ+gSsvIWeJ4Hj4HPlWJwPhYoQFiowLuYIcGbDtiMaki325yR
> tJPzhAnUSNo4fJXptwLbD7bQoNOX0o0gApRpke7Cjg+AeEXpxcttZXITExDz7Sm7
> oWVstFVljyhmB/XmsHLQM2k7E2rc+2qJkjZRkNaM2un05ALioX9gPcdPIVAONFLM
> u+BDaSTD0Rfjtx9nABak9vCrktNpZEtpY7gDsLhYUkSa9UWwH5TaDleK+9t2mS0B
> kjA9oYtajCLA1A4muZ0wa8JVHqtsjU9dbmJXPwLik/QuYCxX4QmRsOeVm8SImnh6
> QPLkZ80dTKqNBdpBsTonnHShpdkNjG9bVDUgRSPV9qiDwzkTi537/g8diUZ4mdpf
> UWpdh81MBXaDiFA49/4NycGCqdHGVkoAtjUnEIZ6LVVaQ+432bLdC76gIMhHUCuf
> Q0d3jrmOxdZXr/JH25XW6te6pkolJWg8BoOIi+cRNNOEb3jvQ+8/Ob7rJh6XXpNK
> 2En7XGZnLaNFR3E9wCjOYCkcXm64OtFRWlSpdFlVEXRzPM+5r6szTLlkRM/rznt2
> iJMZAWyqybUo1mgLq8Fv
> =l+Ge
> -----END PGP SIGNATURE-----
>
> ------------------------------------------------------------------------------
> This SF email is sponsosred by:
> Try Windows Azure free for 90 days Click Here
> http://p.sf.net/sfu/sfd2d-msazure
> _____________________________________________________________________
> Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
>        https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> For additional LTSP help,   try #ltsp channel on irc.freenode.net
>    


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to