CVE-2007-0625
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NoMachine NX Server的nxconfigure.sh没有验证激活用户，本地用户可以修改/usr/NX/etc/server.cfg中的服务器设置并导致未明拒绝服务。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-0625
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NoMachine NX Server 'NXCONFIGURE.SH'远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NoMachine NX Server的nxconfigure.sh没有验证激活用户，本地用户可以修改/usr/NX/etc/server.cfg中的服务器设置并导致未明拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-0625
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-0625
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-0625 (5)
Other References for CVE-2007-0625 (2)
-
http://www.nomachine.com/news_read.php?idnews=190 x_refsource_CONFIRM
-
http://www.nomachine.com/tr/view.php?id=TR01E01622 x_refsource_CONFIRM
Same Patch Batch · n/a · 2007-01-31 · 37 CVEs total
| CVE-2007-0635 | EncapsCMS 多个PHP远程文件包含漏洞 | |
| CVE-2007-0627 | Michael Still gtalkbot 安全信息泄露漏洞 | |
| CVE-2007-0628 | Sun Java System Access Manager 多个跨站脚本攻击漏洞 | |
| CVE-2007-0629 | Plain Black WebGUI www_purgeList方法安全绕过漏洞 | |
| CVE-2007-0630 | X-dev xNews 'class.news.php' 多个SQL注入漏洞 | |
| CVE-2007-0631 | CascadianFaq 'Index.PHP' SQL注入漏洞 | |
| CVE-2007-0632 | ASP EDGE 'artreplydelete.asp' SQL注入漏洞 | |
| CVE-2007-0633 | MyNews 'Themefunc.PHP' 远程文件包含漏洞 | |
| CVE-2007-0634 | Sun Solaris畸形ICMP报文远程未明漏洞 | |
| CVE-2007-0626 | Drupal 'comment.module' comment_form_add_preview函数远程任意代码执行漏洞 | |
| CVE-2007-0636 | Inotify Incron 未明漏洞 | |
| CVE-2007-0637 | Galeria Zdjec 'ZD_Numer.PHP' 本地文件包含漏洞 | |
| CVE-2007-0638 | PHPFootball 'Show.PHP'信息泄露漏洞 | |
| CVE-2007-0639 | GuppY 'error.php'多个静态代码注入漏洞 | |
| CVE-2007-0640 | Zabbix Unspecified SNMP IP地址缓冲区溢出漏洞 | |
| CVE-2007-0641 | SSC DiskAccess NFS Client 'DAPCNFSD.DLL' 栈缓冲区溢出漏洞 | |
| CVE-2007-0642 | ASPSide.Com TForum 'User_Confirm.ASP' 多个SQL注入漏洞 | |
| CVE-2007-0643 | Bloodshed Dev-C++ '.cpp文件' 栈缓冲区溢出漏洞 | |
| CVE-2007-0615 | Hitachi JP1/HIBUN Advanced Edition Management Server和Log Server未明拒绝服务攻击漏洞 | |
| CVE-2007-0466 | Telestream Flip4Mac WMV文件远程内存破坏漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-0625
No comments yet