CVE-2013-4376

HIGH 7.5CVE-2013-4376 · Published 09/12/2013 · updated 16/06/2026

In short

CVE-2013-4376 is a HIGH (CVSS 7.5) vulnerability affecting x2go server (x2go).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
x2go server x2go	`= 4.0.0.0≤ 4.0.0.1`	No fix yet

Description

The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl.

References

code.x2go.org/gitweb
security.gentoo.org/glsa/glsa-201310-19.xml
openwall.com/lists/oss-security/2013/09/25/11
lists.berlios.de/pipermail/x2go-announcement/2013-May/000125.html · Vendor Advisory

More vulnerabilities in x2go server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free