[ldm] [CVE-2008-1293] information disclosure
Bug #227295 reported by
disabled.user
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| ldm (Debian) |
Fix Released
|
Unknown
|
|||
| ldm (Ubuntu) |
Fix Released
|
Medium
|
Oliver Grawert | ||
| Dapper |
Fix Released
|
Medium
|
Oliver Grawert | ||
| Feisty |
Fix Released
|
Medium
|
Oliver Grawert | ||
| Gutsy |
Fix Released
|
Medium
|
Oliver Grawert | ||
Bug Description
Binary package hint: ldm
References:
DSA-1561-1 (http://
Quoting:
"Christian Herzog discovered that within the Linux Terminal Server Project,
it was possible to connect to X on any LTSP client from any host on the
network, making client windows and keystrokes visible to that host."
CVE References
Revision history for this message
| Oliver Grawert (ogra) wrote | #1 |
Revision history for this message
| Oliver Grawert (ogra) wrote | #2 |
| Changed in ldm: | |
| status: | New → Confirmed |
| Changed in ldm: | |
| status: | Unknown → Fix Released |
Revision history for this message
| Oliver Grawert (ogra) wrote | #3 |
Revision history for this message
| Oliver Grawert (ogra) wrote | #4 |
Revision history for this message
| Oliver Grawert (ogra) wrote | #5 |
| Changed in ldm: | |
| assignee: | nobody → keescook |
| status: | Confirmed → In Progress |
Revision history for this message
| Kees Cook (kees) wrote | #6 |
| Changed in ldm: | |
| status: | In Progress → Fix Released |
| assignee: | nobody → ogra |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → ogra |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → ogra |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | keescook → ogra |
| importance: | Undecided → Medium |
Revision history for this message
| emmanuel (emmanuel-inl) wrote | #7 |
| Changed in ldm: | |
| status: | Fix Released → Invalid |
Revision history for this message
| Kees Cook (kees) wrote | #8 |
| Changed in ldm: | |
| status: | Invalid → Fix Released |
To post a comment you must log in.
this is fixed in hardy and intrepid