What’s Vulnerable › Vulnerabilities

CVE-2012-1166

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-21 · updated 2026-06-16
• Weakness: CWE-78

Description

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Affected products

• Canonical Ltsp Display Manager: 2.2.4, 2.2.5, 2.2.6
• Canonical Ubuntu Linux: 11.04, 11.10

References

• http://irclogs.ltsp.org/?d=2012-03-12
• http://www.ubuntu.com/usn/USN-1398-1
• https://bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340
• http://irclogs.ltsp.org/?d=2012-03-12
• http://www.ubuntu.com/usn/USN-1398-1
• https://bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340

Get alerted when CVE-2012-1166 or the next vulnerability affects your stack