NX: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...

GLSA-200804-05 : NX: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-05 NX: User-assisted execution of arbitrary code Multiple integer overflow and buffer overflow vulnerabilities have been discovered in the X.Org X server as shipped by NX and NX Node vulnerabilities 1-4 in GLSA 200801-09...

XFree86 / X.Org / NX multiple security vulnerabilities

XInput and TOG-CUP extensions memory corruption, EVI and MIT-SHM extensions integer overflows, multiple extensions array index overflows. libxfont PCF fonts parsing buffer overflow...

[ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200804-05:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

Fedora 8 : nx-3.1.0-25.1.fc8 (2008-2258)

Wed Jan 2 2008 Axel Thimm - 3.1.0-25 - Update to 3.1.0. - add nxcompshad, nxauth; remove nxviewer, nxdesktop. - add -fPIC for ppc64. - Propagate %optflags for x8664, too. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

[SECURITY] Fedora 8 Update: nx-3.1.0-25.1.fc8

NX provides a proxy system for the X Window System...

openSUSE 10 Security Update : NX (NX-4952)

This update fixes various Xserver security issues that are also present in NX : XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability IDEF2902 CVE-2007-6429...

openSUSE 10 Security Update : NX (NX-4555)

The XFree code contained in NX was prone to integer overflows CVE-2006-1861 and insufficiently protected against specially crafted PCF files CVE-2006-3467. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2007-5426

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...

CVE-2007-5426

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...

CVE-2007-5426

CVE-2007-5426 : The provided documents identify multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 . The issue arises from injectable content via the page parameter to the default URI for some directories (examples include ActiveKB/ and default/categories/ActiveKB/). The roo...

CVE-2007-5426: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...

GLSA-200710-09 : NX 2.1: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-09 NX 2.1: User-assisted execution of arbitrary code Chris Evans reported an integer overflow within the FreeType PCF font file parser CVE-2006-1861. NX and NX Node are vulnerable to this due to shipping XFree86 4.3.0, whic...

ActiveKB NX 2.6 - index.php Cross-Site Scripting

ActiveKB NX 2.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Sql injection

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5131

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5131

CVE-2007-5131 affects Interspire ActiveKB NX 2.x. The vulnerability is a SQL injection in index.php when handling the browse action via the catId parameter, enabling remote execution of arbitrary SQL commands. Note that ActiveKB 1.5 is also reported to be affected. The linked references confirm t...

CVE-2007-5131: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

XXS в ActiveKB NX 2.5.4

Здравствуйте, 3APA3A. Software: ActiveKB NX 2.5.4 Vendor: www.interspire.com Vulnerability: XXS Risk: низкий Date: 1.09.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: Удаленный атакующий может с помощью специально сформированного URL выполнить...