ALT-PU-2019-2837-1
Closed vulnerabilities
Published: 2016-12-16
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2013-1430
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.
Severity: CRITICAL (9.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-11-23
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-16927
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.
Severity: HIGH (8.4)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- https://github.com/neutrinolabs/xrdp/pull/958
- https://github.com/neutrinolabs/xrdp/pull/958
- https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA
- https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA
- [debian-lts-announce] 20171211 [SECURITY] [DLA 1203-1] xrdp security update
- [debian-lts-announce] 20171211 [SECURITY] [DLA 1203-1] xrdp security update
Closed bugs
update XRDP 0.9.2 --> 0.9.3