Txtdawg

Name of the Vulnerable Software and Affected Versions: xrdp versions prior to 0.10.0 Description: xrdp is an open source RDP server that has a vulnerability allowing attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working, resulting in xrdp allowing an infinite number of login attempts. This could potentially allow a remote attacker to gain unauthorized access through a brute-force attack. Recommendations: To resolve the issue, update to version 0.10.0 or later. As a temporary workaround, consider restricting access to the xrdp server or implementing additional authentication measures to minimize the risk of exploitation.