What is the severity of CVE-2012-1166?

CVE-2012-1166 is considered a high-severity vulnerability due to its potential to allow remote command execution.

How do I fix CVE-2012-1166?

To fix CVE-2012-1166, upgrade the LTSP Display Manager to version 2.2.7 or later.

What versions of LTSP Display Manager are affected by CVE-2012-1166?

CVE-2012-1166 affects LTSP Display Manager versions 2.2.4, 2.2.5, and 2.2.6.

Can CVE-2012-1166 be exploited by local users?

CVE-2012-1166 is primarily a remote vulnerability that can be exploited without local access.

What systems are impacted by CVE-2012-1166?

CVE-2012-1166 impacts systems running Ubuntu Linux versions 11.04 and 11.10 that use vulnerable LTSP Display Manager versions.

Vulnerability/
CVE-2012-1166

critical

CWE

21/5/2014

6/8/2024

CVE-2012-1166: OS Command Injection

First published: Wed May 21 2014(Updated: )

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Canonical LTSP Display Manager	=2.2.4
Canonical LTSP Display Manager	=2.2.5
Canonical LTSP Display Manager	=2.2.6
Ubuntu Linux	=11.04
Ubuntu Linux	=11.10

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-1166?
CVE-2012-1166 is considered a high-severity vulnerability due to its potential to allow remote command execution.
How do I fix CVE-2012-1166?
To fix CVE-2012-1166, upgrade the LTSP Display Manager to version 2.2.7 or later.
What versions of LTSP Display Manager are affected by CVE-2012-1166?
CVE-2012-1166 affects LTSP Display Manager versions 2.2.4, 2.2.5, and 2.2.6.
Can CVE-2012-1166 be exploited by local users?
CVE-2012-1166 is primarily a remote vulnerability that can be exploited without local access.
What systems are impacted by CVE-2012-1166?
CVE-2012-1166 impacts systems running Ubuntu Linux versions 11.04 and 11.10 that use vulnerable LTSP Display Manager versions.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/last-modified-date
agent/author
agent/references
agent/description
agent/event
agent/first-publish-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/canonical
canonical/canonical ltsp display manager
version/canonical ltsp display manager/2.2.4
version/canonical ltsp display manager/2.2.5
version/canonical ltsp display manager/2.2.6
canonical/ubuntu linux
version/ubuntu linux/11.04
version/ubuntu linux/11.10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.