Root Access Vulnerability in LTSP LDM by LTSP
CVE-2019-20373

7.8HIGH

Key Information:

Vendor: Debian
Status: Debian Linux
Vendor: CVE Published:; 9 January 2020

What is CVE-2019-20373?

The LTSP LDM, as of versions up to 2.18.06, has a vulnerability that permits root access for fat clients. This issue arises due to the LDM_USERNAME variable potentially being empty when the user's shell does not support Bourne shell syntax. This vulnerability is tied to the run-x-session script, which can lead to unauthorized access and potential system compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch