CVE-2011-1595

Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.

CVSS v2.0

4.3 MEDIUMAV:A/AC:H/Au:N/C:P/I:P/A:P

EPSS

1.09% chance of exploitation in the next 30 days, 63th percentile

Published

2011-05-24

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugzilla.redhat.com/show_bug.cgi?id=676252

References

• CVE Record
• NVD entry

Related

• CVE-2011-1591
• CVE-2011-1609
• CVE-2011-1575
• CVE-2011-1613
• CVE-2011-1574
• CVE-2011-1653