CVE-2008-1802

Published: May 12, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.

Affected (1)

Products: Rdesktop: Rdesktop

Rdesktop

1 product

Rdesktop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rdesktop Rdesktop	Version 1.5.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697

Source: cve@mitre.org

http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdp.c?r1=1.101&r2=1.102&pathrev=HEAD

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/30118

Source: cve@mitre.org

http://secunia.com/advisories/30248

Source: cve@mitre.org

http://secunia.com/advisories/30713

Source: cve@mitre.org

http://secunia.com/advisories/31928

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200806-04.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1573

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:101

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/29097

Source: cve@mitre.org

http://www.securitytracker.com/id?1019991

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-646-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1467/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2403

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42275

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5585

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697