Description
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.
References (15)
Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1025525
Patch x_refsource_confirm
http://rdesktop.svn.sourceforge.net/viewvc/rdesktop?view=revision&revision=1626
Vendor Advisory vendor-advisory
x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2011-0506.html
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:102
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/47419
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061309.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061170.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51023
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201210-03.xml
Patch x_refsource_confirm
http://sourceforge.net/projects/rdesktop/files/rdesktop/1.7.0/rdesktop-1.7.0.tar.gz/download
Product mailing-list
x_refsource_mlist
http://sourceforge.net/mailarchive/message.php?msg_id=27376554
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44881
Exploit, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=676252
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1136-1
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061316.html
Scores
EPSS
0.0109
EPSS Percentile
61.5%
Details
CWE
CWE-22
Status
published
Products (9)
rdesktop/rdesktop
1.0.0
rdesktop/rdesktop
1.1.0
rdesktop/rdesktop
1.2.0
rdesktop/rdesktop
1.3.0
rdesktop/rdesktop
1.3.1
rdesktop/rdesktop
1.4.0
rdesktop/rdesktop
1.4.1
rdesktop/rdesktop
1.5.0
rdesktop/rdesktop
< 1.6.0
Published
May 24, 2011
Tracked Since
Feb 18, 2026