Level of TS Server and TS Client isolation

Archived from groups: microsoft.public.windowsnt.terminalserver.connectivity (More info?)

Hi all,

This security related issue must have been a conern to many. Is the TS
client safe from a compromised ts server assuming there is properly
configured firewall between the two?

TS Server: W2K, W2K3, [WinXP Pro]
TS Client: 5.2 on W2K Pro or WinXP

Assuming
- drive redirection is disabled on both the server and the client,
- firewall used to separate the server and client (server cannot initiate
connections to TS client; ts client can only connect to port 3389 on the ts
server)

What is the realistic level of isolation between the TS server and the TS
client?

Specifically, if the TS server become compromised by
hacker/worm/trojan/virus
- what is the chance of the malware spreading to the ts client?
- what can be done to minimize such mishaps?

Thanks

Tim