CVE-2011-1595 Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rdesktop | <= 1.6.0 | No fix listed |
| rdesktop | = 1.0.0 | No fix listed |
| rdesktop | = 1.1.0 | No fix listed |
| rdesktop | = 1.2.0 | No fix listed |
| rdesktop | = 1.3.0 | No fix listed |
| rdesktop | = 1.3.1 | No fix listed |
| rdesktop | = 1.4.0 | No fix listed |
| rdesktop | = 1.4.1 | No fix listed |
| rdesktop | = 1.5.0 | No fix listed |
| debian/rdesktop(Debian:12) | < 1.7.0-1 | 1.7.0-1 |
| debian/rdesktop(Debian:13) | < 1.7.0-1 | 1.7.0-1 |
| debian/rdesktop(Debian:14) | < 1.7.0-1 | 1.7.0-1 |
References
- FEDORA-2011-7688 vendor-advisory
- FEDORA-2011-7694 vendor-advisory
- FEDORA-2011-7697 vendor-advisory
- rdesktop.svn.sourceforge.net patch
- 44881 third-party-advisory
- 51023 third-party-advisory
- GLSA-201210-03 vendor-advisory
- 1025525 vdb-entry
- [rdesktop-announce] 20110418 rdesktop 1.7.0 released mailing-list
- sourceforge.net patch
- MDVSA-2011:102 vendor-advisory
- 47419 vdb-entry
- USN-1136-1 vendor-advisory
- bugzilla.redhat.com exploit patch
- RHSA-2011:0506 vendor-advisory
- Debian Security Tracker CVE-2011-1595 vendor-advisory
- bugs.debian.org issue-tracking