NoMachine Support

Your questions answered

Knowledge Base

Searching in: Trouble Reports
Filter the search results
Last update:
Affects:
Product:
Status:
Searching in: Trouble Reports
ID: TR02P08408
Added on: 2018-02-14
Last update: 2018-02-20
Solved in version: 6.0.80
Platform: Windows 7
Product: NoMachine Device Services
Severity: Serious
Status: Closed
Possible escalation of local user's privileges on Windows 7 (32bit)

A local Windows user can gain more elevated privileges through the nxfuse component. NXFuse is a NoMachine OSS component based on Dokan library v. 0.6.0. To download the nxfuse source code: https://www.nomachine.com/opensource

This problem has been reproduced only on Windows 7 at 32 bit with both NoMachine v. 5 and 6 (servers and client).

We cannot however exclude that such defect could affect also 64bit systems or lead to a possible DoS (Denyal of Service) on other Windows systems.

All Windows users are therefore kindly invited to update their NoMachine installations.

 

The fix for this issue is released in NoMachine software packages for Windows v. 6.0.80 and 5.3.26.