Export limit exceeded: 18365 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2008-1293

ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).

CVSS 2.0 · 4.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Ltsp
Products
Linux Terminal Server Project
CVE-2019-20373

LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Ltsp
Products
Debian Linux Ldm