Metasploit using the Remote Desktop Protocol RDP denial of Access Vulnerability (MS12-020)

Vulnerability version:

Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows Server 2003 Standard Edition Microsoft Windo WS-Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows 7

Vulnerability Description:

The Bugtraq id:52354 CVE id:cve-2012-0152 Remote Desktop Protocol (RDP, remotely desktop Protocol) is a multi-channel (multi-channel) protocol that allows the user (client or "local computer" ) connected to a computer that provides Microsoft Terminal Services (server-side or "remote computer"). Windows terminal Server has errors while processing certain RDP messages and can be exploited to cause service to stop responding

Security recommendations:

Vendor Patch: Microsoft---------Microsoft has released a security bulletin (ms12-020) and corresponding patches for this: Ms12-020:vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)


uses msf:use auxiliary/dos/windows/rdp/ms12_020_maxchannelids to 
exploit this vulnerability


Use Metasploit for attack

When a seems is present, the target has been attacked.