PT-2017-12681

Name of the Vulnerable Software and Affected Versions NoMachine versions prior to 5.3.10 Description The issue allows authenticated users to gain privileges by accessing local files due to an unspecified server utility. Recommendations For versions prior to 5.3.10, update to version 5.3.10 or lat...

CVE-2017-12763: Incorrect Default Permissions

An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files...

NoMachine 5.3.9 - Local Privilege Escalation

NoMachine 5.3.9 - Local Privilege Escalation """ Exploit Title: NoMachine LPE - Local Privilege Escalation Date: 09/08/2017 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.nomachine.com Software Link: https://www.nomachine.com Version: 5.3.9 Tested on: OSX CVE : CVE-2017-12763...

NoMachine 5.3.9 - Local Privilege Escalation

""" Exploit Title: NoMachine LPE - Local Privilege Escalation Date: 09/08/2017 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.nomachine.com Software Link: https://www.nomachine.com Version: 5.3.9 Tested on: OSX CVE : CVE-2017-12763 NoMachine uses a file called nxexec in order t...

nomachine.com XSS vulnerability

Vulnerable URL: https://www.nomachine.com/Major-Semiconductor-Electronics-Provider/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 136635 VIP website status:| Yes Check nomachine.com SSL...

Nomachine NX Web Companion code spoofing

client.zip file is downloaded without signature check...

CVE-2011-3977

Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors...

CVE-2011-3977

NoMachine NX Server/Node vulnerable component: nxconfigure.sh in NX Server 3.x (pre-3.5.0-5) and NX Node 3.x (pre-3.5.0-4) contains an unspecified vulnerability that allows local users to read arbitrary files via unknown vectors. Exploitation conditions and impact are described as local privilege...

CVE-2011-3977

Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors...

PT-2011-4789

Name of the Vulnerable Software and Affected Versions NoMachine NX Node versions 3.x before 3.5.0-4 NoMachine NX Server versions 3.x before 3.5.0-5 Description The issue allows local users to read arbitrary files via unknown vectors due to an unspecified vulnerability in nxconfigure.sh...

CVE-2011-3977: Undefined Security Weakness

Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors...

Re: NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux

Research@NGSSecure [email protected] wrote: Vulnerable SUID script in nomachine NX Server for Linux 3.5.0-4 Advanced and Enterprise across redhat and debian hosts 21 September 2011 NGS Secure has discovered a High risk vulnerability in nomachine NX Server for Linux 3.5.0-4 Advanced and...

Nomachine NX Server privilege escalation

shell code execution via environment variables manipulation for suid application...

NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux

Vulnerable SUID script in nomachine NX Server for Linux 3.5.0-4 Advanced and Enterprise across redhat and debian hosts 21 September 2011 NGS Secure has discovered a High risk vulnerability in nomachine NX Server for Linux 3.5.0-4 Advanced and Enterprise across redhat and debian hosts. Impact:...

NX: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...

NX 2.1: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Chris Evans reported an integer overflow within the FreeType...

NoMachine NX Server privilege escalation

nxconfigure.sh doesn't check invoking user, allowing configuration file modification...

CVE-2007-0625

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...

Denial of service

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service...