Directory Traversal Vulnerability in rdesktop
Summary
CVE-2011-1595: Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. Affects rdesktop versions < 1.7.0-1. Fixed in 1.7.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rdesktop is an open-source client for Windows Remote Desktop Services, allowing users to connect to a remote Windows desktop over a network connection. It provides a way to access Windows applications and desktops from Linux systems. However, prior to version 1.7.0, rdesktop is vulnerable to a directory traversal attack when disk redirection is enabled. This vulnerability allows remote RDP servers to read or overwrite arbitrary files by exploiting the '..' (dot dot) character sequence in a pathname.
Vulnerability Detail
The directory traversal vulnerability in rdesktop arises from a flaw in the disk_create function in disk.c. When disk redirection is enabled, an attacker can manipulate the pathname by including the '..' sequence to traverse directories and access files outside the intended scope. By exploiting this vulnerability, a remote RDP server can read or overwrite arbitrary files on the client system, potentially leading to unauthorized access, data leakage, or system compromise.
How To Fix
Minimum fixed version
1.7.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade rdesktopTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround is to disable disk redirection in rdesktop. By disabling this feature, the vulnerability can be mitigated. However, it is important to note that this workaround may limit certain functionalities that rely on disk redirection.
Conclusion
The directory traversal vulnerability in rdesktop can be mitigated by upgrading to version 1.7.0 or later. Users should ensure they are running the latest version of rdesktop to protect against potential unauthorized file access. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for rdesktop →
FAQ
rdesktop is an open-source client for Windows Remote Desktop Services, allowing users to connect to a remote Windows desktop over a network connection.
A directory traversal vulnerability, also known as path traversal or dot dot slash attack, occurs when an attacker can manipulate file or directory paths to access files or directories outside the intended scope.
The directory traversal vulnerability in rdesktop allows remote RDP servers to read or overwrite arbitrary files on the client system, potentially leading to unauthorized access, data leakage, or system compromise.
Yes, upgrading to rdesktop version 1.7.0 or later fixes the directory traversal vulnerability. It is recommended to update to the latest available version to ensure the security of the system.
A temporary workaround is to disable disk redirection in rdesktop. However, this may limit certain functionalities that rely on disk redirection. It is recommended to upgrade to the latest version as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for rdesktop.
