CVE-2012-1166: OS Command Injection
Published May 21, 2014
·Updated
The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KPRETURN keybinding, which launches a terminal window.
Affected Software
5 affected components
Canonical Ltsp Display Manager=2.2.4
Canonical Ltsp Display Manager=2.2.5
Canonical Ltsp Display Manager=2.2.6
Canonical Ubuntu Linux=11.04
Canonical Ubuntu Linux=11.10
Event History
May 21, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-1166?
CVE-2012-1166 is considered a high-severity vulnerability due to its potential to allow remote command execution.
2
How do I fix CVE-2012-1166?
To fix CVE-2012-1166, upgrade the LTSP Display Manager to version 2.2.7 or later.
3
What versions of LTSP Display Manager are affected by CVE-2012-1166?
CVE-2012-1166 affects LTSP Display Manager versions 2.2.4, 2.2.5, and 2.2.6.
4
Can CVE-2012-1166 be exploited by local users?
CVE-2012-1166 is primarily a remote vulnerability that can be exploited without local access.
5
What systems are impacted by CVE-2012-1166?
CVE-2012-1166 impacts systems running Ubuntu Linux versions 11.04 and 11.10 that use vulnerable LTSP Display Manager versions.