CVE-2011-3977 - Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.

CVE-2011-3977

Summary

Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:a:nomachine:nx_node:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_node:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_node:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_node:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_node:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_node:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:nomachine:nx_server:3.5.0:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 09-10-2018 - 19:33)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	49720
bugtraq	20110921 NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux
confirm	http://www.nomachine.com/tr/view.php?id=TR08I02575
sreason	8406
xf	nxserver-nxconfigure-priv-escalation(69974)

Last major update

09-10-2018 - 19:33

Published

04-10-2011 - 10:55

Last modified

09-10-2018 - 19:33