|
Rome, Italy, August 5, 2011 -
A bug has been found in the nxconfigure.sh script, the SUIDed script
used by NX Server Manager to handle the server configuration.
This script could be executed by any user from the command line to execute arbitray commands on the system.
A workaround has been provided in the Trouble Report we have opened as severity "Critical":
http://www.nomachine.com/tr/view.php?id=TR08I02575
Due
to the possible command injection vulnerability arising from this
problem, it is strongly advised to upgrade the NX Server and NX Node
installations to the following versions: NX Node 3.5.0-4 and NX Server 3.5.0-5.
The NoMachine Security Team
|
