Astra Linux – vulnerability in xrdp

xrdp is an open source RDP server. Versions up to 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled—which is the default unless explicitly...