CVE-2008-1801 Integer overflow in n/a
Remote attackers can cause a crash or execute arbitrary code in rdesktop via a crafted RDP request exploiting an integer underflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1801?
CVE-2008-1801 is a critical vulnerability in n/a, published on 12 May 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
Weakness: CWE-189
Which versions are affected by CVE-2008-1801?
It affects 1 product.
Linux distribution packages (16)
rdesktop Red Hat:enterprise_linux:3::as | All versions | 0:1.2.0-3 |
rdesktop-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:1.2.0-3 |
rdesktop Red Hat:enterprise_linux:3::desktop | All versions | 0:1.2.0-3 |
rdesktop-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:1.2.0-3 |
rdesktop Red Hat:enterprise_linux:3::es | All versions | 0:1.2.0-3 |
rdesktop-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:1.2.0-3 |
rdesktop Red Hat:enterprise_linux:3::ws | All versions | 0:1.2.0-3 |
rdesktop-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:1.2.0-3 |
rdesktop Red Hat:enterprise_linux:4::as | All versions | 0:1.3.1-9 |
rdesktop-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:1.3.1-9 |
rdesktop Red Hat:enterprise_linux:4::desktop | All versions | 0:1.3.1-9 |
rdesktop-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:1.3.1-9 |
rdesktop Red Hat:enterprise_linux:4::es | All versions | 0:1.3.1-9 |
rdesktop-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:1.3.1-9 |
rdesktop Red Hat:enterprise_linux:4::ws | All versions | 0:1.3.1-9 |
rdesktop-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:1.3.1-9 |
Products include Rdesktop Rdesktop.
How do I fix CVE-2008-1801?
Upgrade to a fixed version.
Is CVE-2008-1801 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-1801 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2008-1801, GHSA-fmmp-hrq3-7r3f, RHSA-2008:0576, RHSA-2008:0725.