NoMachine Support

Your questions answered

Knowledge Base

Searching in: Software Updates
Filter the search results
Released on:
Searching in: Software Updates
ID: SU02P00195
Released on:  2018-02-20
Last update: 2018-04-19
Vulnerability in OSS nxfuse component

Luxembourg, February 20th, 2018

NoMachine makes available version 6.0.80 to fix a vulnerability affecting computers with Windows 7 installed. A local Windows user can gain elevated privileges through the nxfuse component. Nxfuse, based on the Dokan library v. 0.6.0, is an Open Source Software (OSS) component shipped in all NoMachine software packages.

This problem was reported on Windows 7 32-bit architecture and affects both NoMachine servers and clients. Customers with version 6 packages installed on all Windows operating systems are invited to download and install this update.

NoMachine has also made the nxfuse source code available here:

https://www.nomachine.com/opensource.

Customers using version 5 packages should consult the announcement here:

https://www.nomachine.com/SU02P00194.

This release fixes the following Trouble Report:

TR02P08408 - Possible escalation of local user's privileges on Windows 7 (32bit)

 

Supported Platforms

Windows 32-bit/64-bit XP/Vista/7/8/8.1/10

 

Important notices

All customers are invited to read the following document available in the Knowledge Base for further information about what has changed and how to proceed with updating from version 5:

https://www.nomachine.com/DT03O00129

Installations of version 6 can proceed with using automatic updates from within the User Interface.

 

Download NoMachine Packages

You can download the latest packages suitable for your Operating System from the NoMachine Web site at the following URL:

https://www.nomachine.com/download

Customers with valid subscriptions should log in to their customer area and download the "Production version". The procedure of downloading and installing Update Version packages is now obsolete.


Automatic updates

The automatic check for updates is scheduled to check our repositories every two days.

To update the free NoMachine package:

- Open the NoMachine User Interface from your Programs Menu.

- Click on 'Settings', then on the 'Server preferences' and finally on 'Updates'.

- Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

- Click on 'Settings' and 'Updates'.

- Then click on the 'Check now' button.

More information about the check for automatic updates is available here:

https://www.nomachine.com/AR05M00847


Manual package update

Please follow the instructions to update your installation manually:

On Windows:

- Download and save the EXE file.
- Double click on the NoMachine executable file.
- As for the installation, the Setup Wizard will take you through all steps necessary for updating NoMachine.

 

Documents

Installation and configuration guides for the NoMachine products are available at:

https://www.nomachine.com/all-documents

 

The NoMachine Security Team