CVE-2012-1166
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| ubuntu | 11.04 | affected | |
| ubuntu | 11.10 | affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| canonical | ltsp_display_manager | 2.2.4 | |
| canonical | ltsp_display_manager | 2.2.5 | |
| canonical | ltsp_display_manager | 2.2.6 | |
References
CWEs
CWE-78
Verify integrity in audit chain (admin only). AS-IS.