OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
|
|
SecurityTracker Alert ID: 1019707
|
|
SecurityTracker URL: http://securitytracker.com/id?1019707
|
|
CVE Reference: CVE-2008-1483
(Links to External Site)
|
Date: Mar 26 2008
|
Impact: User access via local system
|
Exploit Included: Yes
|
Version(s): 4.3p2, possibly other versions
|
Description: A vulnerability was reported in OpenSSH. A local user can hijack a target user's X session.
If the specified X11 forwarding port is in use via IPv4 but not in use by IPv6, the server does not properly select a different port. A local user can hijack forwarded X connections.
Timo Juhani Lindfors reported this vulnerability.
|
Impact: A local user can hijack forwarded X connections.
|
Solution: No solution was available at the time of this entry.
|
Vendor URL: www.openssh.org/ (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Apr 17 2008
|
(FreeBSD Issues Fix) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
(FreeBSD Security Advisories <security-advisories@freebsd.org>)
FreeBSD has released a fix for FreeBSD 5.5, 6.1, 6.2, 6.3, 7.0, and 7.1.
|
|
Apr 22 2008
|
(NetBSD Issues Fix) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
(NetBSD Security-Officer <security-officer@NetBSD.org>)
NetBSD has released a fix for NetBSD 3.0, 3.1, and 4.0.
|
|
May 7 2008
|
(Sun Solaris is Affected) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
Sun is working on a fix for Solaris 9 and 10.
|
|
May 22 2008
|
(IBM Issues Fix) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
IBM has issued a fix for AIX 5.2, 5.3, and 6.1.
|
|
May 22 2008
|
(HP Issues Fix for HP-UX) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases
HP has issued a fix for HP-UX 11.11, 11.23, and 11.31.
|
|
Source Message Contents
|
Date: Wed, 26 Mar 2008 10:29:43 -0500
Subject: OpenSSH
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
CVE-2008-1483
|
|
