Mandriva- Advisories MDVSA-2008:101: Updated rdesktop packages fix vulnerabilities

[Mandriva]

Advisories MDVSA-2008:101: Updated rdesktop packages fix vulnerabilities
Several vulnerabilities were discovered in rdesktop, a Remote Desktop
Protocol client.

An integer underflow vulnerability allowed attackers to cause a
denial of service (crash) and possibly execute arbitrary code with
the privileges of the logged-in user (CVE-2008-1801).

A buffer overflow vulnerability allowed attackers to execute arbitrary
code with the privileges of the logged-in user (CVE-2008-1802).

An integer signedness vulnerability allowed attackers to
execute arbitrary code with the privileges of the logged-in user
(CVE-2008-1803).

In order for these vulnerabilities to be exploited, an attacker must
persuade a targeted user to connect to a malicious RDP server.

The updated packages have been patched to correct these issues.
http://mandrivausers.org/index.php?showtopic=58694
http://mandrivausers.org/index.php?showtopic=58694
Fri, 16 May 2008 21:51:21 +0000