Skip to main content

Xrdp CVE-2017-6967

HIGH
Improper Authentication (CWE-287)
2017-03-17 cve@mitre.org
Authentication Bypass Xrdp
7.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.3 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

1
CVE Published
Mar 17, 2017 - 09:59 cve.org
HIGH 7.3

DescriptionCVE.org

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.

AnalysisAI

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass. Affected products include: Neutrinolabs Xrdp.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Xrdp

View all
CVE-2013-1430 CRITICAL
9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit
CVE-2024-39917 CRITICAL
9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au
CVE-2022-23484 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23480 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23479 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23478 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23477 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23468 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2025-68670 CRITICAL
9.1 Jan 27

xrdp open-source RDP server before v0.10.5 has an unauthenticated stack buffer overflow enabling remote code execution.
CVE-2022-23493 CRITICAL
9.1 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23483 CRITICAL
9.1 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23482 CRITICAL
9.1 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2017-6967 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy