CVE-2008-1802 Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified leng...
HighCVSS 9.3
EPSS 13.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rdesktop | = 1.5.0 | No fix listed |
| debian/rdesktop(Debian:12) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:13) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:14) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
References
- Debian Security Tracker CVE-2008-1802 vendor-advisory
- bugs.debian.org issue-tracking
- 20080507 Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability third-party-advisory
- rdesktop.cvs.sourceforge.net exploit
- 30118 third-party-advisory
- 30248 third-party-advisory
- 30713 third-party-advisory
- 31928 third-party-advisory
- GLSA-200806-04 vendor-advisory
- 240708 vendor-advisory
- support.avaya.com
- DSA-1573 vendor-advisory
- MDVSA-2008:101 vendor-advisory
- FEDORA-2008-3886 vendor-advisory
- FEDORA-2008-3917 vendor-advisory
- FEDORA-2008-3985 vendor-advisory
- 29097 vdb-entry
- 1019991 vdb-entry
- USN-646-1 vendor-advisory
- ADV-2008-1467 vdb-entry
- ADV-2008-2403 vdb-entry
- rdesktop-processredirectpdu-bo(42275) vdb-entry
- 5585 exploit