Vulnerabilities > CVE-2007-0625 - Remote Denial Of Service vulnerability in NoMachine NX Server NXCONFIGURE.SH

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
nomachine

Summary

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.

Vulnerable Configurations

Part Description Count
Application
Nomachine
1