Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions

The Apache Project's popular Guacamole open-source remote desktop software contained vulns allowing remote attackers to steal login creds and hijack targeted machines, researchers have said. Israeli infosec outfit Check Point discovered the reverse RDP flaws, an attack method that allows a compromised host to transmit malware …

[Anonymous Coward]

So you're saying

Avocado is toast?

[Warm Braw]

Re: So you're saying

Pitted against the bug, the Apache Foundation seem to have smashed it.

[Robert Grant]

Re: So you're saying

But for attackers who exploited it, think of all that green!

[Trigonoceps occipitalis]

Re: So you're saying

Isn't Avocado the basis of that Guacamole you get in fish 'n' chip shops?

[Smartypantz]

Smell of fear

Ooehh. i Love the smell of fear in the morning!

Vendors of remote support, remote desktop "und so weiter" (looking directly at teamviewer and their "upgrade now or else" scheme) must be trembling..

Open source desktop sharing with no hassles? I can't wait! And i won't! Now that i know of Apache Guacamole! HAR-HAR! /Nelson