Microsoft revives deprecated RDCMan after fixing security flaw


Microsoft has actually restored the Remote Desktop Connection Manager (RDCMan) application that was actually deprecated in 2015 as a result of an crucial intensity info declaration insect the provider determined certainly not to take care of.

RDCMan is actually a Windows RDP (Remote Desktop Protocol) customer made use of through body admins to take care of numerous remote control personal computer relationships.

After ceasing the application, Microsoft advised customers to shift to Windows integrated Remote Desktop Connection (% windir% system32mstsc.exe) or even the universal Remote Desktop client

“An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML input containing a reference to an external entity,” Microsoft explained in the March 2020 security advising.

“An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.”

Attackers could possibly capitalize on the insect (tracked as CVE-2020-0765) through fooling certified intendeds right into opening up RDG reports having maliciously crafted XML information.

RDCMan restored as a Sysinternals device

However, as Microsoft Azure CTO Mark Russinovich uncovered previously this year, the provider incorporated RDCMan to the Windows Sysinternals toolkit as well as discharged version 2.8 in overdue June.

“Good news for RDCMan (Remote Desktop Connection Manager) fans (like me): we’ve saved it from abandonment by bringing into Sysinternals,” Russinovich said in February, validating the device’s rebirth. “Look for its Sysinternals debut in the near future.”

While the provider failed to discuss any kind of information on the security flaw attended to in RDCMan 2.8, the fixed susceptability was actually neither that triggered the application being actually ceased in 2015.

Microsoft made known today in an update to the initial security advisory that the flaw was actually repaired in RDCMan 2.82, discharged on July 27 with the Sysinternals documentation website

The brand-new Remote Desktop Connection Manager model works on Windows 8.1 as well as greater or even Windows Server 2012 as well as greater.

“User with OS versions prior to Win7/Vista will need to get version 6 of the Terminal Services Client,” Microsoft claims. “You can obtain this from the Microsoft Download Center: XP; Win2003.”


Comments are closed.

buy levitra buy levitra online