Vulnerability in Freenx

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.

EPSS: 0.004 (33.1th percentile) — read the EPSS interpretation.

Affected products

  • Freenx — versions 0.2.0, 0.2.1, 0.2.2
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Exploit)
  • cve@mitre.org (Exploit, vendor-advisory, x_refsource_SUSE, Vendor Advisory)