USN-646-1: rdesktop vulnerabilities

It was discovered that rdesktop did not properly validate the length of packet headers when processing RDP requests. If a user were tricked into connecting to a malicious server, an attacker could cause a denial of service or possible execute arbitrary code with the privileges of the user...

openSUSE 10 Security Update : rdesktop (rdesktop-5271)

Multiple problems have been fixed in rdesktop. CVE-2008-1801, CVE-2008-1802 and CVE-2008-1803 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rdesktop-5271. T...

SuSE 10 Security Update : rdesktop (ZYPP Patch Number 5272)

Multiple problems have been fixed in rdesktop. CVE-2008-1801 / CVE-2008-1802 / CVE-2008-1803 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

RHEL 5 : rdesktop (RHSA-2008:0575)

An updated rdesktop package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

RHEL 4 : rdesktop (RHSA-2008:0725)

Updated rdesktop packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and...

RHEL 3 : rdesktop (RHSA-2008:0576)

Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

rdesktop security update

1.2.0-3 - Bump version 1.2.0-2 - Fix bug 452980, CVE 2008-1801...

rdesktop security update

1.4.1-6 - Update the prototype for xrealloc as well. - Fix bug 452978, cve-2008-1803 - Fix bug 452978, cve-2008-1801...

[slackware-security] rdesktop

New rdesktop packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix a security issue caused by using rdesktop to connect to a malicious or compromised RDP server. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

Debian Security Advisory DSA 1573-1 (rdesktop)

The remote host is missing an update to rdesktop announced via advisory DSA 1573-1. OpenVAS Vulnerability Test $Id: deb15731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1573-1 rdesktop Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 8 : rdesktop-1.6.0-1.fc8 (2008-3917)

Tue May 13 2008 Soren Sandmann - 1.6.0-1 - Update to 1.6.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1573-1 : rdesktop - several vulnerabilities

Several remote vulnerabilities have been discovered in rdesktop, a Remote Desktop Protocol client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1801 Remote exploitation of an integer underflow vulnerability allows attackers to execute arbitrary...

CVE-2008-1801

Integer underflow in the isorecvmsg function iso.c in rdesktop 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Remote Desktop Protocol RDP request with a small length field...

CVE-2008-1801

CVE-2008-1801 concerns an integer underflow in the function iso_recv_msg (iso.c) of rdesktop 1.5.0 . This vulnerability allows a remote attacker to trigger a crash and, potentially, execute arbitrary code via an RDP request with a small length field. Public-advisory coverage across multiple distr...

[SECURITY] [DSA 1573-1] New php5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1573-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 11, 2008 http://www.debian.org/security/faq -...

rdesktop多个缓冲区溢出漏洞

BUGTRAQ ID: 29097 CVECAN ID: CVE-2008-1801,CVE-2008-1802,CVE-2008-1803 rdesktop是实现RDP协议的开源客户端，允许基于Unix的用户登录到Windows终端服务器。 rdesktop负责重新分配动态缓冲区的代码（channelprocess）中存在堆溢出漏洞。rdesktop的xrealloc函数使用有符比较判断所请求的分配大小是否小于1。如果小于1的话，这个函数错误的将分配大小设置为1，这导致分配了错误大小的堆缓冲区，之后会被溢出。...

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability

iDefense Security Advisory 05.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2008 I. BACKGROUND rdesktop is an open source client that speaks the Remote Desktop Protocol RDP. This allows Unix-based users to login to Windows Terminal Servers. More information is available at...

CVE-2008-1801

creationtimestamp| type| source ---|---|--- 2008-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5561...

CVE-2007-1801

CVE-2007-1801 affects sBLOG 0.7.3 Beta. Vulnerability: directory traversal via conf_lang_default in inc/lang.php, allowing remote attackers to cause local file inclusion by injecting PHP sequences into an Apache log file which is then included by inc/lang.php. This can enable arbitrary local file...

CVE-2006-1801

CVE-2006-1801 is an XSS vulnerability in planetSearch+ (planetsearchplus.php) that allows injecting arbitrary script via the search_exp parameter. Documents consistently describe the flaw as a cross-site scripting issue without indicating affected versions or specific exploitation details. The NV...