Arbitrary Code Execution in Microsoft Terminal Server for Local Users

CVE-2006-4465

Summary

Microsoft Terminal Server, under specific configurations where 'Start program at logon' and 'Override settings from user profile and Client Connection Manager wizard' are enabled, could be exploited by local users. By forcing an error in the Explorer environment, unauthorized code execution becomes possible. While these settings were designed for user convenience, they inadvertently expose the server to potential security risks, allowing malicious actors to leverage them for executing arbitrary code.

References