CVE-2013-4376 The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x2go server | <= 4.0.0.1 | No fix listed |
| x2go server | = 4.0.0.0 | No fix listed |
References
- code.x2go.org
- GLSA-201310-19 vendor-advisory
- [oss-security] 20130925 Re: CVE request: X2Go server mailing-list
- [X2Go-Announcement] 20130519 X2Go Server (4.0.0.2) released mailing-list vendor-advisory
- Debian Security Tracker CVE-2013-4376 vendor-advisory