Astra Linux – Vulnerability in xrdp

XRDPT is an open-source remote desktop protocol RDP server. In versions prior to 0.9.23, improper handling of session establishment errors allowed bypassing OS-level session restrictions. The authstartsession function could return a non-zero value 1 in the event of, for example, PAM errors. This...

PT-2017-17432

Name of the Vulnerable Software and Affected Versions xrdp version 0.9.1 Description The issue arises from xrdp calling the PAM function auth start session in an incorrect location. This leads to PAM session modules not being properly initialized, which can result in incorrect configurations or...