Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-1293HistoryApr 29, 2008 - 1:09 p.m.
CVE-2008-1293
2008-04-2913:09:00
Debian Security Bug Tracker
security-tracker.debian.org
7
0.005 Low
EPSS
Percentile
76.1%
ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | ldm | < 2:0.1~bzr20080308-1 | ldm_2:0.1~bzr20080308-1_all.deb |
| Debian | 12 | all | ltsp | < 5.0.40~bzr20071229-1 | ltsp_5.0.40~bzr20071229-1_all.deb |
| Debian | 11 | all | ltsp | < 5.0.40~bzr20071229-1 | ltsp_5.0.40~bzr20071229-1_all.deb |
| Debian | 10 | all | ltsp | < 5.0.40~bzr20071229-1 | ltsp_5.0.40~bzr20071229-1_all.deb |
| Debian | 999 | all | ltsp | < 5.0.40~bzr20071229-1 | ltsp_5.0.40~bzr20071229-1_all.deb |
| Debian | 13 | all | ltsp | < 5.0.40~bzr20071229-1 | ltsp_5.0.40~bzr20071229-1_all.deb |
Related
securityvulns
securityvulns
ldm / ltsp X session hijack
2008-04-28 00:00:00
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
2008-04-28 00:00:00
ubuntucve
ubuntucve
CVE-2008-1293
2008-04-29 00:00:00
cve
cve
CVE-2008-1293
2008-04-29 13:09:00
openvas
openvas
Ubuntu Update for ltsp vulnerability USN-610-1
2009-03-23 00:00:00
Debian Security Advisory DSA 1561-1 (ldm)
2008-04-30 00:00:00
Debian: Security Advisory (DSA-1561-1)
2008-04-30 00:00:00
debian
debian
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
2008-04-28 13:22:48
cvelist
cvelist
CVE-2008-1293
2008-04-29 00:00:00
ubuntu
ubuntu
LTSP vulnerability
2008-05-06 00:00:00
nessus
nessus
Debian DSA-1561-1 : ldm - programming error
2008-05-01 00:00:00
Ubuntu 6.06 LTS / 7.04 / 7.10 : ltsp vulnerability (USN-610-1)
2008-05-09 00:00:00
prion
prion
Code injection
2008-04-29 13:09:00