Ubuntu 11.04 USN-1136-1: rdesktop File Access Issue Moderate

ubuntu

May 25, 2011

An attacker could access your files if rdesktop connected to a malicious server.

Summary

An attacker could access your files if rdesktop connected to a malicious

server.

Software Description:

- rdesktop: RDP client for Windows NT/2000 Terminal Server

Details:

It was discovered that rdesktop incorrectly handled specially crafted

paths when using disk redirection. If a user were tricked into connecting

to a malicious server, an attacker could access arbitrary files on the

user's filesystem.

Topics Covered

security advisory file access Linux distribution attack risk rdesktop

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  rdesktop                        1.6.0-3ubuntu4.1

Ubuntu 10.10:
  rdesktop                        1.6.0-3ubuntu2.1

Ubuntu 10.04 LTS:
  rdesktop                        1.6.0-2ubuntu3.1

In general, a standard system update will make all the necessary changes.