rdesktop multiple security vulnerabilities

Multiple integer overflows and buffer overflows on RDP server response parsing...

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability

iDefense Security Advisory 05.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2008 I. BACKGROUND rdesktop is an open source client that speaks the Remote Desktop Protocol RDP. This allows Unix-based users to login to Windows Terminal Servers. More information is available at...

rdesktop 1.5.0 - 'iso_recv_msg()' Integer Underflow (PoC)

!/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; whilemy $c = $sock-accept print $c "\x03" . TPKT version "\x0...

Ubuntu 6.06 LTS / 6.10 : rdesktop regression (USN-453-2)

USN-453-1 provided an updated libx11 package to fix a security vulnerability. This triggered an error in rdesktop so that it crashed on startup. This update fixes the problem. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Debian DSA-1294-1 : xfree86 - several vulnerabilities

Several vulnerabilities have been discovered in the X Window System, which may lead to privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1003 Sean Larsson discovered an integer overflow in the XC-MISC extension, which might lead ...

USN-453-2: rdesktop regression

USN-453-1 provided an updated libx11 package to fix a security vulnerability. This triggered an error in rdesktop so that it crashed on startup. This update fixes the problem...

security flaw

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

Ubuntu 4.10 / 5.04 : xscreensaver vulnerability (USN-269-1)

In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently...

USN-269-1: xscreensaver vulnerability

In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently...

CVE-2004-2655

The CVE-2004-2655 issue affects XScreenSaver (xscreensaver) components used with rdesktop 1.3.1 and Fedora-era setups. The root cause is a keyboard focus flaw: XScreenSaver prompt for password did not reliably ensure keyboard focus, potentially leaking the user’s password to the focused program w...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

DEBIAN-CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...