rdesktop directory traversal
Published:		26.05.2011
Source:		BUGTRAQ
SecurityVulns ID:		11691
Type:		client
Level:		6/10
Description:		Directory traversal in disk redirection feature.

Affected:		RDESKTOP : rdesktop 1.6
CVE:		CVE-2011-1595 (Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.)

Original document

UBUNTU, [USN-1136-1] rdesktop vulnerability (26.05.2011)

Discuss:

Read or add your comments to this news (0 comments)