Microsoft discontinues RDCMan app following security bug

guest · Mar 12, 2020

Microsoft discontinues RDCMan app following security bug
Microsoft recommends using the Windows in-box remote desktop client (MSTSC) instead
March 12, 2020
https://www.zdnet.com/article/microsoft-discontinues-rdcman-app-following-security-bug/

Microsoft has discontinued this week its Remote Desktop Connection Manager (RDCMan) application following the discovery of a security flaw.

As its name suggests, the app allows users to connect remotely to other Windows computers via RDP (Remote Desktop Protocol).
The app, which was developed by the former Windows Live Experience team for their internal use, has been available for download from the Microsoft website since the late 2000s.

However, RDCMan was never a fully-featured solution for remote management, and Microsoft rolled out alternative tools across the years.
Click to expand...

But this week, with the release of the March 2020 Patch, RDMan's official demise came to be. Microsoft said it received a report about a new bug in RDCMan that could allow an attacker to retrieve data from an RDCMan user's computer.

"To exploit the vulnerability, an attacker could create an RDG file containing specially crafted XML content and convince an authenticated user to open the file," Microsoft said in a security advisory for CVE-2020-0765.
Instead of fixing the bug, Microsoft decided to retire RDCMan, seeing no reason to revive an app that received its last update almost six years ago.
Click to expand...

guest · Aug 10, 2021

Microsoft revives deprecated RDCMan after fixing security flaw
August 10, 2021
https://www.bleepingcomputer.com/ne...deprecated-rdcman-after-fixing-security-flaw/

Microsoft has revived the Remote Desktop Connection Manager (RDCMan) app that was deprecated last year due to an important severity information disclosure bug the company decided not to fix.
RDCMan revived as a Sysinternals tool
However, as Microsoft Azure CTO Mark Russinovich revealed earlier this year, the company added RDCMan to the Windows Sysinternals toolkit and released version 2.8 in late June.

"Good news for RDCMan (Remote Desktop Connection Manager) fans (like me): we've saved it from abandonment by bringing into Sysinternals," Russinovich said in February, confirming the tool's revival. "Look for its Sysinternals debut in the near future."
While the company didn't share any details on the security flaw addressed in RDCMan 2.8, the patched vulnerability was not the one that led to the app being discontinued last year.
Click to expand...

Microsoft disclosed today in an update to the initial security advisory that the flaw was fixed in RDCMan 2.82, released on July 27 through the Sysinternals documentation website.
Click to expand...

Log in or Sign up

Microsoft discontinues RDCMan app following security bug

guest Guest

guest Guest

Log in or Sign up

Microsoft discontinues RDCMan app following security bug

guest Guest

guest Guest

Useful Searches