CVE-2013-4376

The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows...

7.5 HighFix available

The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl.

Exploit likelihood

2.75%Down 3.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2013-4376
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-4376
Updated: 2026-11-02

EUVDEUVD-2013-4258 No score

Record: EUVD-2013-4258
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cpg7-wf7f-wc2r No score

The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows...

Record: GHSA-cpg7-wf7f-wc2r
Weakness: CWE-94
Updated: 2026-11-02

OSVMGASA-2014-0111 No score

Updated x2goserver package fixes security vulnerability

A vulnerability in x2goserver before 4.0.0.2 in the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. A remote attacker may be able to execute arbitrary code with the privileges of the user running the server process (CVE-2013-4376).

A vulnerability in x2goserver before 4.0.0.8 in x2gocleansessions has also been fixed.

Record: MGASA-2014-0111
Updated: 2026-11-02

Affected products

x2go server

Affected packages

Affected packages
Package	Affected	Fixed
`x2goserver` Mageia:3	before 4.0.1.13-1.mga3	4.0.1.13-1.mga3

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4376 is a high vulnerability (CVSS 7.5) in X2go Server, published December 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in x2goserver 4.0.1.13-1.mga3.

References

Show 5 moreShow less