freenx-team team mailing list archive

[skettlitz <launchpad_net@xxxxxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

When logging in, names with non-standard characters like "ä" "ö" "ü"
cannot log in through FreeNX from Windows client, although they can
login locally or through ssh.

Also logging in as domain user with "domain\user" doesn't work from the windows client, but does locally and through ssh.
In FreeNX "domain\\user" does work. Log files show that the double \\ is processed into a single \ somewhere. 

This character processing could possibly also be a security
vulnerability if done by a bash script and implemented in a bad way.

** Affects: freenx-server
     Importance: Undecided
         Status: New

-- 
Wrong encoding of login names and character processing.
https://bugs.launchpad.net/bugs/408759
You received this bug notification because you are a member of FreeNX
Team, which is a direct subscriber.

Status in FreeNX open source NX Server: New

Bug description:
When logging in, names with non-standard characters like "ä" "ö" "ü" cannot log in through FreeNX from Windows client, although they can login locally or through ssh.

Also logging in as domain user with "domain\user" doesn't work from the windows client, but does locally and through ssh.
In FreeNX "domain\\user" does work. Log files show that the double \\ is processed into a single \ somewhere. 

This character processing could possibly also be a security vulnerability if done by a bash script and implemented in a bad way.