CVE-2005-0579

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.htmlExploit, Vendor Advisory
http://www.linuxcompatible.org/story42495.htmlExploit, Vendor Advisory
http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.htmlExploit, Vendor Advisory
http://www.linuxcompatible.org/story42495.htmlExploit, Vendor Advisory

Timeline

Published: Feb 25, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-05802.1cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the CVE-2005-05814.6Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code vi CVE-2005-058210.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in CVE-2005-05835.0Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via CVE-2005-05842.6Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that gener CVE-2005-05852.6Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to CVE-2005-05862.6Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content CVE-2005-05876.5Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downl CVE-2005-05885.0Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, w CVE-2005-05895.0The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that m CVE-2005-05905.0The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to CVE-2005-05912.6Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick use