CVE-2008-1293

MEDIUM 4.8CVE-2008-1293 · Published 29/04/2008 · updated 16/06/2026

In short

CVE-2008-1293 is a MEDIUM (CVSS 4.8) vulnerability affecting linux terminal server project (ltsp).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
linux terminal server project ltsp	`= 0.99= 2`	No fix yet

Description

ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/29959 · Vendor Advisory
secunia.com/advisories/30099 · Vendor Advisory
debian.org/security/2008/dsa-1561
openwall.com/lists/oss-security/2008/03/11/2
openwall.com/lists/oss-security/2008/03/12/3
securityfocus.com/bid/28960
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/42080
usn.ubuntu.com/610-1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free