This morning, Microsoft released security bulletin MS12-036 detailing a critical vulnerability in the Microsoft Remote Desktop Protocol that could allow remote code execution or a denial-of-service if an attacker sends a sequence of specially crafted RDP packets to an affected system.
A large majority of Donet infrastructure and managed customer environments are protected against exploitation of this vulnerability due to the implementation of Network Level Authentication (which requires authentication before a remote desktop session is established). However, there are some environments that are either too old (Windows Server 2003 R2 or earlier) to support Network Level Authentication or require support for clients that do not support Network Level Authentication.
Donet Systems Administrators will be installing this critical security update on all remaining shared infrastructure and managed customer environments that do not support or have disabled Network Level Authentication beginning this evening (06/12/2012) at 10:00 PM EDT with an anticipated completion time of 12:00 AM EDT on Wednesday (06/13/2012).
The installation process takes approximately 2-5 minutes to complete and requires a restart. Service interruptions are expected to be brief and will likely go unnoticed, however minor service interruptions may occur.
All unmanaged customers running Windows are highly encouraged to install this security update at their earliest convenience. The update can be obtained through Windows Update or directly from Microsoft at http://technet.microsoft.com/en-us/security/bulletin/MS12-036.
Donet performs regularly scheduled maintenance to ensure the security, performance and reliability of the services we provide to our customers. We regret any inconvenience our scheduled maintenance activities may cause to our customers. If you have any questions or concerns, please contact the Donet Technical Support Team at (937) 226-6896.
President and Founder
A company is only as good as the people who work there. And in Donet's case, those people are simply exceptional. Bright. Inventive. Rock-solid.
Raleigh Sandy III
Vice President, Founder
You can expect that when you have
a problem, we're going to respond
to it. Quickly. Personally. And effectively.