Bug 386219 – net-misc/tsclient: multiple vulnerabilities (CVE-2011-{0900,0901})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description GLSAMaker/CVETool Bot 2011-10-08 01:14:14 UTC]

CVE-2011-0901 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0901):
  Multiple stack-based buffer overflows in the tsc_launch_remote function
  (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly
  other versions, allow user-assisted remote attackers to execute arbitrary
  code via a .RDP file with a long (1) username, (2) password, or (3) domain
  argument.  NOTE: the provenance of this information is unknown; the details
  are obtained solely from third party information.

CVE-2011-0900 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0900):
  Stack-based buffer overflow in the tsc_launch_remote function
  (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly
  other versions, allows user-assisted remote attackers to execute arbitrary
  code via a .RDP file with a long hostname argument.

[Comment 1 Pacho Ramos 2014-06-01 11:42:03 UTC]

will kill this with the rest of gnome2

[Comment 2 Pacho Ramos 2014-11-13 12:33:10 UTC]

package was removed

[Comment 3 Kristian Fiskerstrand (RETIRED) 2014-12-09 19:39:21 UTC]

Should we make this part of a super GLSA?