Published: 12/05/2008 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rdesktop rdesktop 1.5.0

It was discovered that rdesktop did not properly validate the length of packet headers when processing RDP requests If a user were tricked into connecting to a malicious server, an attacker could cause a denial of service or possible execute arbitrary code with the privileges of the user (CVE-2008-1801) ...

Several remote vulnerabilities have been discovered in rdesktop, a Remote Desktop Protocol client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1801 Remote exploitation of an integer underflow vulnerability allows attackers to execute arbitrary code with the privileges of the logged-in us ...

Debian Bug report logs - #480134 rdesktop: CVE-2008-1802 remote code execution via crafted RDP redirect request Package: rdesktop; Maintainer for rdesktop is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for rdesktop is src:rdesktop (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 8 May ...

Debian Bug report logs - #480135 rdesktop: CVE-2008-1803 integer signedness vulnerability in channel_process() Package: rdesktop; Maintainer for rdesktop is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for rdesktop is src:rdesktop (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 8 May ...

Debian Bug report logs - #480133 rdesktop: CVE-2008-1801 remote code execution Package: rdesktop; Maintainer for rdesktop is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for rdesktop is src:rdesktop (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 8 May 2008 08:54:01 UTC Severity: gra ...

#!/usr/bin/perl # # labsidefensecom/intelligence/vulnerabilities/displayphp?id=696 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET->new(LocalAddr => '0000', LocalPort => '3389', Listen => 1, Reuse => 1) || die($!); while(my $c = $sock->accept()) { print $c "\x03" ...

CWE-189 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696 http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD http://www.securitytracker.com/id?1019990 http://www.debian.org/security/2008/dsa-1573 http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:101 http://www.securityfocus.com/bid/29097 http://secunia.com/advisories/30118 http://secunia.com/advisories/30248 http://www.redhat.com/support/errata/RHSA-2008-0576.html http://security.gentoo.org/glsa/glsa-200806-04.xml http://secunia.com/advisories/30380 http://www.redhat.com/support/errata/RHSA-2008-0575.html http://secunia.com/advisories/31222 http://secunia.com/advisories/30713 http://secunia.com/advisories/31224 http://www.redhat.com/support/errata/RHSA-2008-0725.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286 http://secunia.com/advisories/31928 http://www.ubuntu.com/usn/usn-646-1 http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm http://www.vupen.com/english/advisories/2008/2403 http://www.vupen.com/english/advisories/2008/1467/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42272 https://www.exploit-db.com/exploits/5561 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570 https://usn.ubuntu.com/646-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/5561/

CVE-2008-1801

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect