jetlib.sec » Bugtraq » NX Web Companion Spoofing Arbitrary Code Execution Vulnerability

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 25, 2012
• 

  NX Web Companion Spoofing Arbitrary Code Execution Vulnerability

  Posted: January 25th, 2012, 9:26am PST

  Tags:   

  Posted by otr on Jan 25

  # Vuln Title: NX Web Companion Spoofing Arbitrary Code Execution
  # Vulnerability
  # Date: 25.01.2012
  # Author: otr
  # Software Link: http://www.nomachine.com/documents/plugin/install.php
  # Version: <= 3.x
  # Tested on: Linux, Windows, Mac OS X x86, Mac OS X PPC, Solaris
  # CVE : None, yet
  
  Summary
  
  The No Machine NX Web Companion is a Java applet that allows to
  download and update the No Machine software from a server. The No
  Machine software...