CVE-2013-7383

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks...

CVE-2013-7383

CVE-2013-7383 affects X2Go Server. The vulnerability allows a local/privilege escalation for remote authenticated users via unspecified vectors (possibly related to backticks) in versions prior to 4.0.0.8 and 4.0.1.x before 4.0.1.10. The issue has a CVSSv2 base score of 9.0 (HIGH). Gentoo GLSA 20...

CVE-2013-7383: Undefined Security Weakness

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks...

Mandriva Linux Security Advisory : x2goserver (MDVSA-2014:063)

Updated x2goserver package fixes security vulnerability : A vulnerability in x2goserver before 4.0.0.2 in the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. A remote attacker may be able to...

[ MDVSA-2014:063 ] x2goserver

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:063 http://www.mandriva.com/en/support/security/ Package : x2goserver Date : March 17, 2014 Affected: Business Server 1.0 Problem Description: Updated x2goserver package fixes security vulnerability: A...

Updated x2goserver package fixes security vulnerability

A vulnerability in x2goserver before 4.0.0.2 in the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. A remote attacker may be able to execute arbitrary code with the privileges of the user running...