NoMachine NX - Support: Trouble Report

Added on:

2007-01-29

Last Modified:

2007-01-29

Product:

NX Server

Affecting:

2.1.0

Platform:

All Platforms

Severity:

Critical

Status:

Closed

Solved in version:

nxserver-2.1.0-18

Opened by:

Silvia Regis

Technical Responsible:

Silvia Regis

The nxconfigure.sh script allows users to modify the server configuration file

The NX Server 2.x package provides, among the other scripts, nxconfigure.sh, a SUIDed script used by NX Server Manager to handle server configuration. This script could be executed by any user from the command line to modify values set for the server configuration keys in the /usr/NX/etc/server.cfg file.

A possible workaround, until the new server packages fixing this issue are available, is to remove the nxconfigure.sh script and replace it with a fake file:

# rm /usr/NX/scripts/restricted/nxconfigure.sh
# touch /usr/NX/scripts/restricted/nxconfigure.sh

Please note that by applying this workaround, you will be no longer able to configure the server via NX Server Manager interface until you upgrade your NX server installation to the new package.

Notes

	The nxconfigure.sh script allows users to modify the server configuration file
Nothing available.

Solution

The nxconfigure.sh script allows users to modify the server configuration file

Date: 2007-01-29

Handled by: Silvia Regis

The NX Server 2.1.0-18 packages provide the fix for this Trouble Report. Due to possible denial of service coming from this problem, it is strongly advised to upgrade the NX server installation to the 2.1.0-18 version.