RDP Encryption Level (was RE: RDP sniffing)

["Rui Pereira (WCG)" <wavefront1 () shaw ca>]

While we're talking RDP, does anyone know how to identify the encryption
level in use, remotely? 

Thank You
Rui
 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of MaddHatter
Sent: December 28, 2007 5:28 PM
To: security-basics () securityfocus com
Subject: Re: RDP sniffing

> Windows RDP is encrypted. ...

I forgot to mention that RDP is vulnerable to a man-in-the-middle
attack. (That is, if you're not using certificates, which as I mentioned
I haven't looked into at all.)


No virus found in this incoming message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.17.12/1203 - Release Date: 30/12/2007
11:27 AM
 

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.17.12/1203 - Release Date: 30/12/2007
11:27 AM