CVE-2008-1293

ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.8 UNKNOWN
ADJACENT_NETWORK
LOW
AV:A/AC:L/Au:N/C:P/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
ltsplinux_terminal_server_project
0.99
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ltsp
bullseye
21.01-1+deb11u1
fixed
bookworm
23.02-1+deb12u1
fixed
sid
23.02-3
fixed
trixie
23.02-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ltsp
hardy
not-affected
gutsy
Fixed 5.0.39.1
released
feisty
Fixed 5.0.7.1
released
dapper
Fixed 0.87.1
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462
http://secunia.com/advisories/29959
http://secunia.com/advisories/30099
http://www.debian.org/security/2008/dsa-1561
http://www.openwall.com/lists/oss-security/2008/03/11/2
http://www.openwall.com/lists/oss-security/2008/03/12/3
http://www.securityfocus.com/bid/28960
http://www.securitytracker.com/id?1019940
https://exchange.xforce.ibmcloud.com/vulnerabilities/42080
https://usn.ubuntu.com/610-1/
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462
http://secunia.com/advisories/29959
http://secunia.com/advisories/30099
http://www.debian.org/security/2008/dsa-1561
http://www.openwall.com/lists/oss-security/2008/03/11/2
http://www.openwall.com/lists/oss-security/2008/03/12/3
http://www.securityfocus.com/bid/28960
http://www.securitytracker.com/id?1019940
https://exchange.xforce.ibmcloud.com/vulnerabilities/42080
https://usn.ubuntu.com/610-1/