Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
| Software | From | Fixed in |
|---|---|---|
| caldera / volution | 1.0 | 1.0.x |
| caldera / volution | 1.0.6 | 1.0.6.x |
| caldera / volution | 1.0.7 | 1.0.7.x |