29 matches found
CVE-2013-4376
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl...
Path traversal
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl...
CVE-2013-4376
CVE-2013-4376 affects X2Go Server prior to 4.0.0.2 via the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, enabling a remote attacker to execute arbitrary code with the server process user privileges. Public advisories (Mageia/MGASA, Mandriva ...
CVE-2013-4376
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl...
CVE-2013-4376
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl...
CVE-2013-4376: Improper Control of Generation of Code
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl...
GLSA-201310-19 : X2Go Server: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201310-19 X2Go Server: Arbitrary code execution A vulnerability in the setgid wrapper x2gosqlitewrapper.c does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. Impact : A remot...
PT-2013-1264
Name of the Vulnerable Software and Affected Versions X2Go Server versions prior to 4.0.0.2 Description The issue allows remote attackers to execute arbitrary code, potentially leading to a breach of confidentiality, integrity, and availability of protected information. This can be exploited...
X2Go Server: Arbitrary code execution
Background X2Go is an open source terminal server project. Description A vulnerability in the setgid wrapper x2gosqlitewrapper.c does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. Impact A remote attacker may be able to execute arbitrary co...