CVE-2012-1166

https://notcve.org/view.php?id=CVE-2012-1166

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window. Los atajos de teclado (keybindings) por defecto para wwm de LTSP Display Manager (ldm) versiones 2.2.x anteriores a 2.2.7, permiten a los atacantes remotos ejecutar comandos arbitrarios por medio del atajo de teclado KP_RETURN, que inicia una ventana terminal. • http://irclogs.ltsp.org/?d=2012-03-12 http://www.ubuntu.com/usn/USN-1398-1 https://bugs.launchpad.net/ubuntu/%2Bsource/ldm/%2Bbug/953340 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •