The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.
| Software | From | Fixed in |
|---|---|---|
| canonical / ltsp_display_manager | 2.2.4 | 2.2.4.x |
| canonical / ltsp_display_manager | 2.2.6 | 2.2.6.x |
| canonical / ubuntu_linux | 11.04 | 11.04.x |
| canonical / ubuntu_linux | 11.10 | 11.10.x |
| canonical / ltsp_display_manager | 2.2.5 | 2.2.5.x |