DEBIAN-CVE-2008-1293

Source
https://security-tracker.debian.org/tracker/CVE-2008-1293
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1293.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2008-1293
Upstream
Published
2008-04-29T13:09:00Z
Modified
2025-11-19T02:04:28.795280Z
Summary
[none]
Details

ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).

References

Affected packages

Debian:11 / ltsp

Package

Name
ltsp
Purl
pkg:deb/debian/ltsp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.40~bzr20071229-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1293.json"

Debian:12 / ltsp

Package

Name
ltsp
Purl
pkg:deb/debian/ltsp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.40~bzr20071229-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1293.json"

Debian:13 / ltsp

Package

Name
ltsp
Purl
pkg:deb/debian/ltsp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.40~bzr20071229-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1293.json"

Debian:14 / ltsp

Package

Name
ltsp
Purl
pkg:deb/debian/ltsp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.40~bzr20071229-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1293.json"