Directory Traversal Vulnerability in rdesktop Affects Remote Desktop Connections
CVE-2011-1595

Currently unrated

Key Information:

Vendor: Rdesktop
Status: Rdesktop
Vendor: CVE Published:; 24 May 2011

What is CVE-2011-1595?

A directory traversal vulnerability exists in the disk_create function of the rdesktop application prior to version 1.7.0. When disk redirection is enabled, remote RDP servers can exploit this flaw by manipulating file pathnames using the '..' notation, allowing them to read or overwrite arbitrary files on the host system. This can lead to unauthorized file exposure and potential manipulation of critical files, posing a significant security risk for users relying on remote desktop capabilities.

References

http://securitytracker.com/id?1025525

vdb-entryx_refsource_SECTRACK

http://rdesktop.svn.sourceforge.net/viewvc/rdesktop?view=...

x_refsource_CONFIRM

https://rhn.redhat.com/errata/RHSA-2011-0506.html

vendor-advisoryx_refsource_REDHAT

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 24, 2011
Vulnerability Reserved
Apr 5, 2011

CVE-2011-1595 Data

JSON

Rdesktop

What is CVE-2011-1595?

References

Timeline