Contact Us
SECURITY BLOG SECURITY DASHBOARD PARTNERS PRODUCTS SERVICES COMPANY HOME
 
Security Dashboard | US-CERTs | CNet | SecurityFocus | Advisories | Exploits | Threats | Vulnerabilities | Risks
Network Security Consulting Advisories Article

rdesktop Disk Redirection Directory Traversal Vulnerability

http://www.securityfocus.com/bid/47419

Security Info

Bugtraq ID: 47419
Class: Input Validation Error
CVE: CVE-2011-1595
Remote: Yes
Local: No
Published: Apr 19 2011 12:00AM
Updated: Apr 22 2011 06:14AM
Credit: Noam Rathaus
Vulnerable: Slackware Linux 13.1 x86_64
Slackware Linux 13.1
Slackware Linux 13.0 x86_64
Slackware Linux 13.0
Slackware Linux 12.2
Slackware Linux 12.1
Slackware Linux 12.0
Slackware Linux 11.0
rdesktop rdesktop 1.6.9
rdesktop rdesktop 1.5
Not Vulnerable: rdesktop rdesktop 1.7

Security Discussion

rdesktop is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

rdesktop prior to 1.7.0 are vulnerable.

Proof of Concept and Security Exploits

An attacker can exploit this issue with a web browser.

Security Solution(s)

Solution:
Updates are available. Please see the references for more information.


Slackware Linux 13.0 x86_64

Slackware Linux 12.1

Slackware Linux 12.0

Slackware Linux 13.1 x86_64

Slackware Linux 11.0

Slackware Linux 13.1

Slackware Linux 13.0

Slackware Linux 12.2

Security References(s)

References:

Contact Us

Security Penetration Testing

Security Questions

Security Dashboard

Emagined Security Blog featuring Dr. Eugene Schultz
Site Updated February 22, 2012
©2000-2012 Emagined Security
All Rights Reserved

Secure Web Programming
by Vizual Services