CVE-2008-1801

Integer underflow in the isorecvmsg function iso.c in rdesktop 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Remote Desktop Protocol RDP request with a small length field...

CVE-2008-1801

CVE-2008-1801 concerns an integer underflow in the function iso_recv_msg (iso.c) of rdesktop 1.5.0 . This vulnerability allows a remote attacker to trigger a crash and, potentially, execute arbitrary code via an RDP request with a small length field. Public-advisory coverage across multiple distr...

CVE-2008-1802

Buffer overflow in the processredirectpdu rdp.c function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol RDP redirect request with modified length fields...

CVE-2008-1801

Integer underflow in the isorecvmsg function iso.c in rdesktop 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Remote Desktop Protocol RDP request with a small length field...

DSA-1573-1 rdesktop - several vulnerabilities

Bulletin has no description...

rdesktop 1.5.0 iso_recv_msg() Integer Underflow Vulnerability PoC

Exploit for linux platform in category dos / poc ================================================================= rdesktop 1.5.0 isorecvmsg Integer Underflow Vulnerability PoC ================================================================= !/usr/bin/perl...

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability

iDefense Security Advisory 05.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2008 I. BACKGROUND rdesktop is an open source client that speaks the Remote Desktop Protocol RDP. This allows Unix-based users to login to Windows Terminal Servers. More information is available at...

UltraVNC buffer overflow vulnerability

Overview UltraVNC viewer contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute arbitrary code. Description UltraVNC viewer is a remote desktop application that allows a user to control compatible VNC servers. The UltraVNC viewer includes a...

Talking about the CMD turned on under the Remote Desktop Services-vulnerability warning-the black bar safety net

This article has been published in the hacker X file of the first 7 issues of the magazine on One, the origin Close paragraph of time, Microsoft appears DNS overflow vulnerability crazy a period of time, is now also there are many server can successfully overflow. I believe we all have experience...

Design/Logic Flaw

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

CVE-2007-2593

Technical details for CVE-2007-2593 are not publicly provided in the supplied documents; monitor for updates.

CVE-2007-2593

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

CA eTrust Admin GINA模块权限提升漏洞

CA eTrust Admin可为企业提供整体的安全管理策略。 CA eTrust Admin GINA组件的口令重置接口中存在权限提升漏洞，允许能够物理交互访问或通过远程桌面访问的攻击者获得管理员权限。 Computer Associates eTrust Admin 8.1 SP2 8.1.2 Computer Associates eTrust Admin 8.1 SP1 8.1.1 Computer Associates eTrust Admin 8.1 8.1.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Authentication flaw

Unspecified vulnerability in cube.exe in the GINA component for CA Computer Associates eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface...

Microsoft Windows Help存在多个漏洞

Microsoft Help WINHLP32.EXE处理.hlp文件存在多个远程代码执行和拒绝服务问题。 攻击者可以在WEB页上防止恶意帮助文件，或者通过EMAIL附件形式发送，诱使用户打开来触发此漏洞，成功利用此漏洞可以以进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition...

CVE-2006-4413

Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages...

CVE-2006-4413

Apple Remote Desktop (ARD) prior to 3.1 is affected by insecure permissions on built-in packages, enabling local users on an ARD administration system to modify the packages and gain root privileges on client systems that use the packages. Root cause is insecure package permissions. No remediatio...

CVE-2006-4413

Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages...

CVE-2006-4887

Apple Remote Desktop ARD for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is...

CVE-2006-4887

Apple Remote Desktop ARD for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is...