Port 3389 Details
known port assignments and vulnerabilities
threat/application/port search:
Port(s) |
Protocol |
Service |
Details |
Source |
3389 |
tcp |
rdp |
Port is IANA registered for Microsoft WBT Server, used for Windows Remote Desktop and Remote Assistance connections (RDP - Remote Desktop Protocol). Also used by Windows Terminal Server.
See also: MS Security Bulletin [MS02-051] and [MS01-040].
Trojans using this port: Backdoor.Win32.Agent.cdm [Symantec-2005-050114-4234-99], TSPY_AGENT.ADDQ
This port is vulnerable to Denial of Service Attack Against Windows NT Terminal Server. A remote attacker can quickly cause a server to reach full memory utilization by creating a large number of normal TCP connections to port 3389. Individual connections will timeout, but a low bandwidth
continuous attack will maintain a terminal server at maximum memory utilization and prevent new connections from a legitimate source from taking place. Legitimate new connections will fail at this point with an error of either a connection timeout, or the terminal server has ended the connection.
References: [CVE-1999-0680]
A vulnerability exists in the Remote Desktop Protocol (RDP), where an attacker could send a specially crafted sequence of packets to TCP port 3389 which can result in RDP to accessing an object in memory after it has been deleted.
References: [CVE-2012-2526]
Zmodo Geovision also uses port 3389 (TCP/UDP) |
SG
|
3389 |
tcp |
|
Microsoft Terminal Server (RDP) officially registered as Windows Based Terminal (WBT) (unofficial) |
Wikipedia
|
3389 |
tcp,udp |
ms-term-services |
MS Terminal Services |
SANS
|
21, 80, 3389, 4550, 5550, 6550, 9650 |
tcp |
applications |
GeoVision TwinDVR with Webcam |
Portforward
|
21,80,3389,4550,5550,6550 |
tcp |
applications |
GeoVision Webcam |
Portforward
|
3389 |
tcp,udp |
applications |
Remote Desktop |
Portforward
|
3389 |
tcp |
applications |
Terminal Services |
Portforward
|
3389 |
tcp,udp |
applications |
Windows 2000 Terminal Server |
Portforward
|
3389 |
tcp,udp |
ms-term-serv |
Microsoft Remote Display Protocol |
Nmap
|
3389 |
tcp,udp |
ms-wbt-server |
MS WBT Server |
IANA
|
|
10 records found
|