Test ID:	1.3.6.1.4.1.25623.1.0.10940
Category:	Useless services
Title:	Windows Terminal Service Enabled
Summary:	NOSUMMARY
Description:	Description: The Terminal Services are enabled on the remote host. Terminal Services allow a Windows user to remotely obtain a graphical login (and therefore act as a local user on the remote host). If an attacker gains a valid login and password, he may be able to use this service to gain further access on the remote host. An attacker may also use this service to mount a dictionnary attack against the remote host to try to log in remotely. Note that RDP (the Remote Desktop Protocol) is vulnerable to Man-in-the-middle attacks, making it easy for attackers to steal the credentials of legitimates users by impersonating the Windows server. Solution : Disable the Terminal Services if you do not use them, and do not allow this service to run across the internet Risk factor : Medium
Cross-Ref:	BugTraq ID: 3099 BugTraq ID: 7258 Common Vulnerability Exposure (CVE) ID: CVE-2001-0540 http://www.securityfocus.com/bid/3099 Microsoft Security Bulletin: MS01-040 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040 XForce ISS Database: win-terminal-rdp-dos(6912) https://exchange.xforce.ibmcloud.com/vulnerabilities/6912
Copyright	This script is Copyright (C) 2002 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.