CVE-2011-2916

CVE-2011-2916 describes a vulnerability in qtnx 0.9 where non-custom SSH keys are stored in a world-readable configuration file. This flaw allows a local attacker to potentially obtain private keys used for remote NX sessions if the user's home directory has world-readable or world-executable permissions. Rated as Medium severity (CVSS 5.5), the attack requires local access but could lead to a complete compromise of confidentiality for remote connections. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.