Skip to content

CVE-2012-1166 The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

HighCVSS 10.0 EPSS 4.8%
Published
Updated
Exploit status
No public exploit known

Description

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Affected products

ProductAffected versionsFixed in
Canonical ltsp display manager = 2.2.4 No fix listed
Canonical ltsp display manager = 2.2.5 No fix listed
Canonical ltsp display manager = 2.2.6 No fix listed
Canonical Ubuntu Linux = 11.04 No fix listed
Canonical Ubuntu Linux = 11.10 No fix listed

References