Description
nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.
References
- [FreeNX-kNX] 20050217 Security: Serious bug in authority handling found and fixed mailing-list
- SUSE-SR:2005:006 vendor-advisory