Revision Date: | 2017-09-27 | Version: | 1 | Title: | CVE-2011-1595 | Description: |
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.
| Family: | unix | Class: | vulnerability | Status: | | Reference(s): | CVE-2011-1595
| Platform(s): | openSUSE 11.3 openSUSE 11.4 SLE SDK 10 SP4 for IBM iSeries and IBM pSeries SLE SDK 10 SP4 for IBM zSeries SLE SDK 10 SP4 for IPF SLE SDK 10 SP4 for x86 SLE SDK 10 SP4 for X86-64 SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP4 for x86 SUSE Linux Enterprise Desktop 11 SP1
| Product(s): | | Definition Synopsis | sles10-sp4-sdk is installed AND rdesktop less than 1.6.0-39.6.2
|
|