Vulnerability CVE-2008-1293

Vulnerability Name:

CVE-2008-1293 (CCN-42080)

Assigned:

2008-04-28

Published:

2008-04-28

Updated:

2018-10-03

Summary:

ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

4.8 Medium (CVSS v2 Vector: AV:A/AC:L/Au:N/C:P/I:P/A:N)
3.5 Low (Temporal CVSS v2 Vector: AV:A/AC:L/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-264

Vulnerability Consequences:

Other

References:

Source: CCN
Type: Debian Bug report logs - #469462
X access wide open on LTSP clients

Source: CONFIRM
Type: UNKNOWN
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462

Source: MITRE
Type: CNA
CVE-2008-1293

Source: SECUNIA
Type: Vendor Advisory
29959

Source: SECUNIA
Type: Vendor Advisory
30099

Source: CCN
Type: SECTRACK ID: 1019940
Linux Terminal Server Project ldm Access Control Bug Lets Remote Users Access X Sessions

Source: DEBIAN
Type: UNKNOWN
DSA-1561

Source: DEBIAN
Type: DSA-1561-1
ldm -- programming error

Source: DEBIAN
Type: DSA-1561
ldm -- programming error

Source: CCN
Type: LTSP.org Web site
Linux Terminal Server Project

Source: MLIST
Type: UNKNOWN
[oss-security] 20080311 CVE request: insecure X11 handling in ltsp

Source: MLIST
Type: UNKNOWN
[oss-security] 20080312 Re: CVE request: insecure X11 handling in ltsp

Source: CCN
Type: OSVDB ID: 44681
ldm X11 Forwarding LTSP Client Connection Restriction Bypass

Source: BID
Type: UNKNOWN
28960

Source: CCN
Type: BID-28960
Linux Terminal Server Project 'ldm' Information Disclosure Vulnerability

Source: SECTRACK
Type: UNKNOWN
1019940

Source: CCN
Type: USN-610-1
LTSP vulnerability

Source: XF
Type: UNKNOWN
ltsp-ldm-weak-security(42080)

Source: XF
Type: UNKNOWN
ltsp-ldm-weak-security(42080)

Source: UBUNTU
Type: UNKNOWN
USN-610-1

Vulnerable Configuration:

Configuration 1:

cpe:/a:ltsp:linux_terminal_server_project:0.99:*:*:*:*:*:*:*

OR cpe:/a:ltsp:linux_terminal_server_project:2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ltsp:linux_terminal_server_project:0.99:*:*:*:*:*:*:*

AND

cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*

OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:7.04:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:17723	P	USN-610-1 -- ltsp vulnerability	2014-06-30
oval:org.mitre.oval:def:7398	P	DSA-1561 ldm -- programming error	2014-06-23
oval:org.mitre.oval:def:20319	P	DSA-1561-1 ltsp - information disclosure	2014-06-23
oval:org.debian:def:1561	V	programming error	2008-04-28

BACK