CVE-2013-4376

CVE-2013-4376 affects X2Go Server prior to 4.0.0.2 via the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, enabling a remote attacker to execute arbitrary code with the server process user privileges. Public advisories (Mageia/MGASA, Mandriva ...

CVE-2013-7383

CVE-2013-7383 affects X2Go Server. The vulnerability allows a local/privilege escalation for remote authenticated users via unspecified vectors (possibly related to backticks) in versions prior to 4.0.0.8 and 4.0.1.x before 4.0.1.10. The issue has a CVSSv2 base score of 9.0 (HIGH). Gentoo GLSA 20...