CVE Feed

    Dashboard / CVE / CVE-2011-1595

    CVE-2011-1595

    Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.

    Published:Apr 18, 2011
    Last Modified:Apr 11, 2025
    EPS:May 24, 2011
    EPSS Score:0.00303
    CVSS Score:4.3

    Affected Products

    Vendor
    Rdesktop
    Product
    Rdesktop
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=676252https://bugzilla.redhat.com/show_bug.cgi?id=676252

    Related CVEs

    CVE-2019-15682 (CVSS 7.5) — RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results i…
    CVE-2018-20178 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_acti…
    CVE-2018-8794 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write …
    CVE-2018-20182 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the functi…
    CVE-2018-8791 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that re…
    CVE-2018-8792 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() t…
    CVE-2018-20180 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Ov…
    CVE-2018-8798 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() t…
    CVE-2018-8799 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order…
    CVE-2018-8800 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_d…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061170.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061309.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061316.html
    http://rdesktop.svn.sourceforge.net/viewvc/rdesktop?view=revision&revision=1626
    http://secunia.com/advisories/44881
    http://secunia.com/advisories/51023
    http://security.gentoo.org/glsa/glsa-201210-03.xml
    http://securitytracker.com/id?1025525
    http://sourceforge.net/mailarchive/message.php?msg_id=27376554
    http://sourceforge.net/projects/rdesktop/files/rdesktop/1.7.0/rdesktop-1.7.0.tar.gz/download
    http://www.mandriva.com/security/advisories?name=MDVSA-2011:102
    http://www.securityfocus.com/bid/47419
    http://www.ubuntu.com/usn/USN-1136-1
    https://bugzilla.redhat.com/show_bug.cgi?id=676252
    https://rhn.redhat.com/errata/RHSA-2011-0506.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061170.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061309.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061316.html
    http://rdesktop.svn.sourceforge.net/viewvc/rdesktop?view=revision&revision=1626
    http://secunia.com/advisories/44881
    http://secunia.com/advisories/51023
    http://security.gentoo.org/glsa/glsa-201210-03.xml
    http://securitytracker.com/id?1025525
    http://sourceforge.net/mailarchive/message.php?msg_id=27376554
    http://sourceforge.net/projects/rdesktop/files/rdesktop/1.7.0/rdesktop-1.7.0.tar.gz/download
    http://www.mandriva.com/security/advisories?name=MDVSA-2011:102
    http://www.securityfocus.com/bid/47419
    http://www.ubuntu.com/usn/USN-1136-1
    https://bugzilla.redhat.com/show_bug.cgi?id=676252
    https://rhn.redhat.com/errata/RHSA-2011-0506.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High