CVE-2012-1166

CRITICAL 10.0CVE-2012-1166 · Published 21/05/2014 · updated 16/06/2026

In short

CVE-2012-1166 is a CRITICAL (CVSS 10.0) vulnerability affecting ltsp display manager (canonical).
Chance of exploitation in the next 30 days (EPSS): 4.8%, higher than 92.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ltsp display manager canonical	`= 2.2.4= 2.2.5= 2.2.6`	No fix yet

Description

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

References

irclogs.ltsp.org
ubuntu.com/usn/USN-1398-1
bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free