← Back

Ltsp

ltsp

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Linux Terminal Server Project
linux_terminal_server_project
1 CVE
Ldm
ldm
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-20373
2Debian
Ltsp
2Debian Linux
Ldm
Jun 17, 2026
Jan 9, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script.
CVE-2008-1293
1Ltsp
1Linux Terminal Server Project
Apr 23, 2026
Apr 29, 2008
N/A· v4
N/A· v3
4.8 MEDIUM· v2
ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).