漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
Vulnerability Description
xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management could allow an authenticated local attacker to escalate privileges to root and execute arbitrary code on the system. An additional exploit would be needed to facilitate this. This issue has been fixed in version 0.10.6.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对于放弃特权的检查不恰当
Vulnerability Title
xrdp 安全漏洞
Vulnerability Description
xrdp是neutrinolabs开源的一款开源远程桌面协议服务器。 xrdp 0.10.5及之前版本存在安全漏洞，该漏洞源于会话执行组件未正确处理权限丢弃过程中的错误，可能导致经过身份验证的本地攻击者将权限提升至root并执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A