ByteOS Network

Vulnerability Details :

CVE-2013-7383

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-20 May, 2014 | 14:00

Updated At-06 Aug, 2024 | 18:09

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:20 May, 2014 | 14:00

Updated At:06 Aug, 2024 | 18:09

▼CVE Numbering Authority (CNA)

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/65001	vdb-entry x_refsource_BID
http://www.openwall.com/lists/oss-security/2014/05/18/1	mailing-list x_refsource_MLIST
http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2014/05/19/4	mailing-list x_refsource_MLIST
http://security.gentoo.org/glsa/glsa-201405-26.xml	vendor-advisory x_refsource_GENTOO

Hyperlink: http://www.securityfocus.com/bid/65001

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/18/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/19/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://security.gentoo.org/glsa/glsa-201405-26.xml

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/65001	vdb-entry x_refsource_BID x_transferred
http://www.openwall.com/lists/oss-security/2014/05/18/1	mailing-list x_refsource_MLIST x_transferred
http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2014/05/19/4	mailing-list x_refsource_MLIST x_transferred
http://security.gentoo.org/glsa/glsa-201405-26.xml	vendor-advisory x_refsource_GENTOO x_transferred

Hyperlink: http://www.securityfocus.com/bid/65001

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/18/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/19/4

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201405-26.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:20 May, 2014 | 14:55

Updated At:12 Apr, 2025 | 10:46

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

x2go>>x2go_server>>Versions up to 4.0.0.7(inclusive)

cpe:2.3:a:x2go:x2go_server:*:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.0

cpe:2.3:a:x2go:x2go_server:4.0.0.0:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.1

cpe:2.3:a:x2go:x2go_server:4.0.0.1:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.2

cpe:2.3:a:x2go:x2go_server:4.0.0.2:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.3

cpe:2.3:a:x2go:x2go_server:4.0.0.3:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.4

cpe:2.3:a:x2go:x2go_server:4.0.0.4:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.0.6

cpe:2.3:a:x2go:x2go_server:4.0.0.6:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.0

cpe:2.3:a:x2go:x2go_server:4.0.1.0:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.1

cpe:2.3:a:x2go:x2go_server:4.0.1.1:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.2

cpe:2.3:a:x2go:x2go_server:4.0.1.2:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.3

cpe:2.3:a:x2go:x2go_server:4.0.1.3:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.4

cpe:2.3:a:x2go:x2go_server:4.0.1.4:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.5

cpe:2.3:a:x2go:x2go_server:4.0.1.5:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.6

cpe:2.3:a:x2go:x2go_server:4.0.1.6:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.7

cpe:2.3:a:x2go:x2go_server:4.0.1.7:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.8

cpe:2.3:a:x2go:x2go_server:4.0.1.8:*:*:*:*:*:*:*

x2go>>x2go_server>>4.0.1.9

cpe:2.3:a:x2go:x2go_server:4.0.1.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83	cve@mitre.org	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201405-26.xml	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2014/05/18/1	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2014/05/19/4	cve@mitre.org	N/A
http://www.securityfocus.com/bid/65001	cve@mitre.org	N/A
http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201405-26.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2014/05/18/1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2014/05/19/4	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/65001	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://security.gentoo.org/glsa/glsa-201405-26.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/18/1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2014/05/19/4

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/65001

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/83