Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.881304
Kategorie:CentOS Local Security Checks
Titel:CentOS Update for rdesktop CESA-2011:0506 centos5 x86_64
Zusammenfassung:The remote host is missing an update for the 'rdesktop'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'rdesktop'
package(s) announced via the referenced advisory.

Vulnerability Insight:
rdesktop is a client for the Remote Desktop Server (previously, Terminal
Server) in Microsoft Windows. It uses the Remote Desktop Protocol (RDP) to
remotely present a user's desktop.

A directory traversal flaw was found in the way rdesktop shared a local
path with a remote server. If a user connects to a malicious server with
rdesktop, the server could use this flaw to cause rdesktop to read and
write to arbitrary, local files accessible to the user running rdesktop.
(CVE-2011-1595)

Red Hat would like to thank Cendio AB for reporting this issue. Cendio AB
acknowledges an anonymous contributor working with the SecuriTeam Secure
Disclosure program as the original reporter.

Users of rdesktop should upgrade to this updated package, which contains a
backported patch to resolve this issue.

Affected Software/OS:
rdesktop on CentOS 5

Solution:
Please install the updated packages.

CVSS Score:
4.3

CVSS Vector:
AV:A/AC:H/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-1595
BugTraq ID: 47419
http://www.securityfocus.com/bid/47419
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061170.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061309.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061316.html
http://security.gentoo.org/glsa/glsa-201210-03.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2011:102
http://sourceforge.net/mailarchive/message.php?msg_id=27376554
RedHat Security Advisories: RHSA-2011:0506
https://rhn.redhat.com/errata/RHSA-2011-0506.html
http://securitytracker.com/id?1025525
http://secunia.com/advisories/44881
http://secunia.com/advisories/51023
http://www.ubuntu.com/usn/USN-1136-1
CopyrightCopyright (c) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.