Unscored severity · published Jan 31, 2007
CVE-2007-0625
nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg,…
–
CVSS
0.3%
EPSS
No
On KEV
Description
nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
NX Server · Nomachine
through 2.1.0_17 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0625
osvdb.org
http://osvdb.org/33009
Patch
http://secunia.com/advisories/23993
Patch
http://www.nomachine.com/news_read.php?idnews=190
www.nomachine.com
http://www.nomachine.com/tr/view.php?id=TR01E01622
www.securityfocus.com
http://www.securityfocus.com/bid/22308
www.vupen.com
http://www.vupen.com/english/advisories/2007/0413
More from NX Server
–
CVE-2011-3977
Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors