NetSight
critical10.0

CVE-2012-1166

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybind…

Impact

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Affected products

VendorProductAffected versions
CanonicalLtsp Display Manager
Versions 2.2.4, 2.2.5, 2.2.6
CanonicalUbuntu Linux
Versions 11.04, 11.10

Weakness classification

References