rdesktop-1.6.0-8.AXS4.1

エラータID: AXSA:2011-197:01

リリース日: 
2011/05/19 Thursday - 16:18
題名: 
rdesktop-1.6.0-8.AXS4.1
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol (RDP) in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required.
Security issues fixed with this release:
CVE-2011-1595
No description available at the time of writing, please use the CVE link below.

解決策: 

Update packages.

CVE: 
CVE-2011-1595
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. rdesktop-1.6.0-8.AXS4.1.src.rpm
    MD5: d2cf25493b93985ab9e04644ef714c31
    SHA-256: 506f36124868d4e813c81dd3990449019777d2c20d5f832a21454a7a1abeb931
    Size: 287.39 kB

Asianux Server 4 for x86
  1. rdesktop-1.6.0-8.AXS4.1.i686.rpm
    MD5: e090b6233bd124613f80a07644dcb4ce
    SHA-256: 9a082525c4a1e2bf0f15a416cf6c1301ff523e16affa2e4a33c52d8155be86d8
    Size: 144.41 kB

Asianux Server 4 for x86_64
  1. rdesktop-1.6.0-8.AXS4.1.x86_64.rpm
    MD5: 10b63cbe34944d53016fbef0ebccf262
    SHA-256: 7ef4e3d6dd7a02b26eff0ce807014901595390d785d09f1e25f937d00852341c
    Size: 150.24 kB