Vulnerability Details CVE-2012-1166
The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.044
EPSS Ranking 88.3%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2012-1166
-
cpe:2.3:a:canonical:ltsp_display_manager:2.2.4
-
cpe:2.3:a:canonical:ltsp_display_manager:2.2.5
-
cpe:2.3:a:canonical:ltsp_display_manager:2.2.6
-
cpe:2.3:o:canonical:ubuntu_linux:11.04
-
cpe:2.3:o:canonical:ubuntu_linux:11.10