Vulnerabilities > Ltsp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-01-09 | CVE-2019-20373 | LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. | 7.2 |
| 2008-04-29 | CVE-2008-1293 | Permissions, Privileges, and Access Controls vulnerability in Ltsp Linux Terminal Server Project 0.99/2 ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6). | 4.8 |