Published: 21/05/2014 Updated: 31/05/2014

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x prior to 2.2.7 allow remote malicious users to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 11.10
canonical ltsp display manager 2.2.6
canonical ubuntu linux 11.04
canonical ltsp display manager 2.2.5
canonical ltsp display manager 2.2.4

Debian Bug report logs - #663645 [CVE-2012-1166] ldm allows for a passwordless root shell Package: ldm; Maintainer for ldm is Debian LTSP Maintainers <team+ltsp@trackerdebianorg>; Source for ldm is src:ldm (PTS, buildd, popcon) Reported by: Luciano Bello <luciano@debianorg> Date: Mon, 12 Mar 2012 22:45:01 UTC Sev ...

LTSP Display Manager could be made to run programs as an administrator ...

CWE-78 http://irclogs.ltsp.org/?d=2012-03-12 http://www.ubuntu.com/usn/USN-1398-1 https://bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663645 https://usn.ubuntu.com/1398-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-1166

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect