critical9.0
CVE-2013-7383
x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possi…
Impact
x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X2go | X2go Server | through 4.0.0.7 Versions 4.0.0.0, 4.0.0.1, 4.0.0.2, 4.0.0.3, 4.0.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83
- http://security.gentoo.org/glsa/glsa-201405-26.xml
- http://www.openwall.com/lists/oss-security/2014/05/18/1
- http://www.openwall.com/lists/oss-security/2014/05/19/4
- http://www.securityfocus.com/bid/65001
- http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83
- http://security.gentoo.org/glsa/glsa-201405-26.xml
- http://www.openwall.com/lists/oss-security/2014/05/18/1
- http://www.openwall.com/lists/oss-security/2014/05/19/4
- http://www.securityfocus.com/bid/65001