CVE-2011-1595
Fixed in a distro release EPSS 1%
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.
Products: rdesktop
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rdesktop | 1.7.0-1 |
| Debian 13 | rdesktop | 1.7.0-1 |
| Debian 14 | rdesktop | 1.7.0-1 |
| Red Hat Enterprise Linux 5 | rdesktop | 0:1.6.0-3.el5_6.2 |
| Red Hat Enterprise Linux 5 | rdesktop-debuginfo | 0:1.6.0-3.el5_6.2 |
| Red Hat Enterprise Linux 6 | rdesktop | 0:1.6.0-8.el6_0.1 |
| Red Hat Enterprise Linux 6 | rdesktop-debuginfo | 0:1.6.0-8.el6_0.1 |