Skip to content

Latest commit

 

History

History
 
 

CVE-2008-1802

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 

CVE-2008-1802

Experiment Environment

ubuntu 10.04 LTS

INSTALL & Configuration

wget https://github.com/mudongliang/source-packages/raw/master/CVE-2008-1801/rdesktop-1.5.0.tar.gz
tar -xvf rdesktop-1.5.0.tar.gz
cd rdesktop-1.5.0
./configure
make

Problems in Installation & Configuration

How to trigger vulnerability

Server:

./rdesktop-1.5.0/rdesktop localhost

Client:

perl 5585.pl

PoCs

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

rdesktop Multiple Remote Memory Corruption Vulnerabilities

Vulnerability Details & Patch

Root Cause

Description: Some vulnerabilities have been reported in rdesktop, which can be exploited by malicious people to compromise a user's system.

......

  1. An input validation error in rdp.c when processing RDP redirect requests can be exploited to cause a BSS-based buffer overflow.

Stack Trace

Patch

References