CVE-2008-1801 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-1801
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1801

Description: Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42272 UBUNTU http://www.ubuntu.com/usn/usn-646-1 SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1 ST 1019990 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286 SAID Secunia Advisory: SA30118 Secunia Advisory: SA30248 Secunia Advisory: SA30380 Secunia Advisory: SA30713 Secunia Advisory: SA31222 Secunia Advisory: SA31224 Secunia Advisory: SA31928 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0725.html http://www.redhat.com/support/errata/RHSA-2008-0576.html http://www.redhat.com/support/errata/RHSA-2008-0575.html MILW0RM http://www.milw0rm.com/exploits/5561 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:101 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 GENTOO http://security.gentoo.org/glsa/glsa-200806-04.xml FEDORA http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html DEBIAN http://www.debian.org/security/2008/dsa-1573 CONFIRM http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD BID 29097

Return to the previous page.