freenx-team team mailing list archive

[skettlitz <launchpad_net@xxxxxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

When the user password starts with a "-" (dash), the login through the
nx-client does not work, although other methods of login work correctly.
This is possibly, because the password is interpreted as parameter to
some command in a bash script used by nx. This could possible also allow
code injection or dangerous unintended behaviour.

** Affects: freenx-server
     Importance: Undecided
         Status: New

-- 
Login fails for passwords starting with "-" (dash)
https://bugs.launchpad.net/bugs/408875
You received this bug notification because you are a member of FreeNX
Team, which is a direct subscriber.

Status in FreeNX open source NX Server: New

Bug description:
When the user password starts with a "-" (dash), the login through the nx-client does not work, although other methods of login work correctly. This is possibly, because the password is interpreted as parameter to some command in a bash script used by nx. This could possible also allow code injection or dangerous unintended behaviour.