Microsoft Remote Desktop Connection Client for Mac Support for RDP 7.1 I have several users who are running Microsoft Remote Desktop Connection Client for Mac (version 2.1.1) who can no longer access Remote Desktop Services because the client doesnt support RDP 7.1.
Active6 years, 8 months ago
![]()
Install sql server on mac. When working from Windows, I prefer to use RoyalTS instead of the default Microsoft RDP client, because it allows me to save multiple connections, the credentials of the connection, etc; as well has having more than 1 connection open at a time.
Is there a similar (or any) alternative to the Microsoft RDP client for connecting from OSX to Windows? Aside from VNC, that is; at this point I'm hoping to continue using the RDP protocol.
Adam TuttleAdam Tuttle
42222 gold badges88 silver badges2323 bronze badges
closed as off topic by Canadian Luke, Dave, CharlieRB, James Mertz, soandosJan 7 '13 at 19:36
Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here. If this question can be reworded to fit the rules in the help center, please edit the question.
![]() 4 AnswersGaff
16.3k1111 gold badges5050 silver badges6565 bronze badges
cOle2cOle2
Troubleshooting remote desktop client for mac 2016. Yep, you can use TSclientX, an alternative to RDP Client for Mac OS X.
TSclientX is freeware.
Gaff
16.3k1111 gold badges5050 silver badges6565 bronze badges
John TJohn T
146k2222 gold badges304304 silver badges335335 bronze badges
I can confirm that Thinomenon's RDC has the advantage to be compatible with Mac OS X 10.7 Lion when CoRD, TSclientX and apparently Microsoft's Remote Desktop Connection are not.
user185101user185101
http://www.thinomenon.com/products/RemoteDesktopClient/osx.aspx is the best RDC client available for free on Mac/Windows/Linux
Sergey PakhomenkoSergey Pakhomenko
Not the answer you're looking for? Browse other questions tagged windowsmacosremote-desktop or ask your own question.
Details
A vulnerability exists in Microsoft Remote Desktop for Mac that allows a remote attacker to execute arbitrary code on the target machine.
User interaction is needed to exploit this issue, but a single click on a link (sent via mail, iMessage, etc.) is sufficient to trigger the vulnerability.
Microsoft Remote Desktop Client for Mac OS X (ver 8.0.32 and probably prior) allows a malicious Terminal Server to read and write any file in the home directory of the connecting user.
The vulnerability exists to the way the application handles rdp urls. In the rdp url schema it’s possible to specify a parameter that will make the user’s home directory accessible to the server without any warning or confirmation request. If an attacker can trick a user to open a malicious rdp url, he/she can read and write any file within the victim’s home directory.
Since Mac OS X by default opens rdp urls without confirmation (for example via Safari, Mail, Messages), a single click on a link it’s sufficient to trigger the vulnerability.
According to Microsoft, no CVE will be assigned due to the release model of this particular client.
A demo video is available at https://youtu.be/6HeSiXYRpNY
[youtube https://youtu.be/6HeSiXYRpNY ]
PoC
The following Proof Of Concept creates a directory on the victim’s home and puts a file into it.
To reproduce the issue follow the steps below:
RDC link:
Python script:
Remote Code Execution
To execute arbitrary code on the target machine we can use a trick that involves ssh and ssh:// URI handler.
Consider the following example where the RDC exploit pushes the following files on the remote machine:
At this point any attempt to launch ssh://p will lead to the execution of ~/.ssh/command.sh without any warning.
To automatically execute the triggering URL (ssh://p) we can either: Mac Rdp Client For Windows
It’s also possible achieve Remote Code Execution by sending a single link to the victim if he/she uses Safari as the default browser.
Update
On Jan 17 2017 Apple pushed a security uptate to Safari that prevents this exploit from working.
This fix is mentioned in the Apple Store: This update fixes an issue where a website could repeately attempt to launch other websites or applications Warmane 3.3.5a client for mac. SolutionRemote Desktop Client For Mac
Update Microsoft RDC to the latest version. The version 8.0.37 fixes this issue.
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |