rdesktop-1.6.0-3.2.0.1.AXS3

エラータID: AXSA:2011-203:02

Release date: 
Monday, May 23, 2011 - 15:20
Subject: 
rdesktop-1.6.0-3.2.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol (RDP) in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required.
Security issues fixed with this release:
CVE-2011-1595
No description available at the time of writing, please use the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2011-1595
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.


Additional Info: 

N/A

Download: 

SRPMS
  1. rdesktop-1.6.0-3.2.0.1.AXS3.src.rpm
    MD5: 5db5cbac4de6c60bc0eac24788aba9e1
    SHA-256: 3027e9fe909be0f168193c1b83e1defb60abe4382e3afda886ad5079255b216f
    Size: 288.75 kB

Asianux Server 3 for x86
  1. rdesktop-1.6.0-3.2.0.1.AXS3.i386.rpm
    MD5: 27177bbbf234062b96533466e6495d29
    SHA-256: 2f87787484b17aea4f147febe4434285f04dd08858113e117f6a73c2f8e77c3e
    Size: 157.49 kB

Asianux Server 3 for x86_64
  1. rdesktop-1.6.0-3.2.0.1.AXS3.x86_64.rpm
    MD5: 2bb225cbf75f3100dbe88ad8a6e47e24
    SHA-256: 417999d32650a2a9e90b9e658a61f69ea1376674086c3713239916430959b6c8
    Size: 168.92 kB