| Package | Affected versions | Patched versions |
|---|---|---|
| ldm | ≤ 2.18.06 |
LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free