TCP_MS Terminal server request RDP


Code: p526

Severity: Warning


Description: This event is generated when a malicious packet is sent to the Microsoft Terminal Server port.

Impact: Denial of service. Sending repeated packets may cause a denial of service by consuming all available memory resources.

Corrective: Apply the patches discussed in Microsoft Security Bulletin MS01-040. Block access to the Microsoft Terminal Server port from outside the network.