CVE-2011-1595

2011-05-1900:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

52.4%

JSON

Directory traversal vulnerability in the disk_create function in disk.c in
rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP
servers to read or overwrite arbitrary files via a … (dot dot) in a
pathname.

Bugs

Notes

Author	Note
jdstrand	PoC in bug

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrdesktop< 1.6.0-2ubuntu3.1UNKNOWN
ubuntu10.10noarchrdesktop< 1.6.0-3ubuntu2.1UNKNOWN
ubuntu11.04noarchrdesktop< 1.6.0-3ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	rdesktop	< 1.6.0-2ubuntu3.1	UNKNOWN
ubuntu	10.10	noarch	rdesktop	< 1.6.0-3ubuntu2.1	UNKNOWN
ubuntu	11.04	noarch	rdesktop	< 1.6.0-3ubuntu4.1	UNKNOWN