CVE-2013-4376

Published 09 Dec 2013 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.7%

The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl.

Affected products

n/a · n/a

References

http://code.x2go.org/gitweb?p=x2goserver.git%3Ba=commit%3Bh=42264c88d7885474ebe3763b2991681ddfcfa69a http://security.gentoo.org/glsa/glsa-201310-19.xml https://lists.berlios.de/pipermail/x2go-announcement/2013-May/000125.html http://www.openwall.com/lists/oss-security/2013/09/25/11