Ubuntu Update for ldm USN-1398-1

Ubuntu Update for Linux kernel vulnerabilities USN-1398-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13981.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ldm USN-1398-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1398-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 / 11.10 : ldm vulnerability (USN-1398-1)

Tenho Tuhkala discovered that the LTSP Display Manager ldm incorrectly filtered keybindings. An attacker could use the default keybindings to execute arbitrary commands as root at the login screen. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-1398-1: LTSP Display Manager vulnerability

Tenho Tuhkala discovered that the LTSP Display Manager ldm incorrectly filtered keybindings. An attacker could use the default keybindings to execute arbitrary commands as root at the login screen...

Ubuntu Update for ltsp vulnerability USN-610-1

Ubuntu Update for Linux kernel vulnerabilities USN-610-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6101.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ltsp vulnerability USN-610-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200703-19 (ltsp)

The remote host is missing updates announced in advisory GLSA 200703-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-19 (ltsp)

The remote host is missing updates announced in advisory GLSA 200703-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-07 (ltsp)

The remote host is missing updates announced in advisory GLSA 200805-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-07 (ltsp)

The remote host is missing updates announced in advisory GLSA 200805-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Ubuntu 6.06 LTS / 7.04 / 7.10 : ltsp vulnerability (USN-610-1)

Christian Herzog discovered that it was possible to connect to any LTSP client's X session over the network. A remote attacker could eavesdrop on X events, read window contents, and record keystrokes, possibly gaining access to private information. Note that Tenable Network Security has extracted...

USN-610-1: LTSP vulnerability

Christian Herzog discovered that it was possible to connect to any LTSP client's X session over the network. A remote attacker could eavesdrop on X events, read window contents, and record keystrokes, possibly gaining access to private information...

Debian DSA-1561-1 : ldm - programming error

Christian Herzog discovered that within the Linux Terminal Server Project, it was possible to connect to X on any LTSP client from any host on the network, making client windows and keystrokes visible to that host. NOTE: most ldm installs are likely to be in a chroot environment exported over NFS...

Debian Security Advisory DSA 1561-1 (ldm)

The remote host is missing an update to ldm announced via advisory DSA 1561-1. OpenVAS Vulnerability Test $Id: deb15611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1561-1 ldm Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1561-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

CVE-2008-1293

The CVE-2008-1293 entry describes a vulnerability in LTSP’s ldm where -ac is passed to the X server on LTSP clients, enabling a remote attacker to connect to the client X display (display :6, TCP port 6006) and potentially observe/record keystrokes. Connected advisories (Ubuntu USN-610-1, Debian ...

[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1561-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...