CVE-2008-1483
- State
- Published
- Severity
- Not scored
- Published
- Mar 24, 2008
- Updated
- Aug 7, 2024
- Reserved
- Mar 24, 2008
Description
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2008-1123vdb-entry
- http://support.attachmate.com/techdocs/2374.html
- DSA-1576vendor-advisory
- 29554third-party-advisory
- ADV-2008-1526vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm
- ADV-2008-1630vdb-entry
- [security-announce] 20080403 Globus Security Advisory 2008-01: GSI-OpenSSH vulnerabilitymailing-list
- 29686third-party-advisory
- APPLE-SA-2008-09-15vendor-advisory
- 31531third-party-advisory
- SSA:2008-095-01vendor-advisory
- http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc
- HPSBUX02337vendor-advisory
- openssh-sshd-session-hijacking(41438)vdb-entry
- USN-597-1vendor-advisory
- 1019235vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
- TA08-260Athird-party-advisory
- https://issues.rpath.com/browse/RPL-2397
- ADV-2008-1624vdb-entry
- ADV-2008-2584vdb-entry
- 30249third-party-advisory
- 20130220 OpenSSH Forwarded X Connection Session Hijack Vulnerabilityvendor-advisory
- 29735third-party-advisory
- 29683third-party-advisory
- 30361third-party-advisory
- 31882third-party-advisory
- SUSE-SR:2008:009vendor-advisory
- 29721third-party-advisory
- ADV-2008-2396vdb-entry
- 29522third-party-advisory
- 30086third-party-advisory
- 29939third-party-advisory
- 30347third-party-advisory
- oval:org.mitre.oval:def:6085vdb-entrysignature
- ADV-2008-0994vdb-entry
- 1019707vdb-entry
- 237444vendor-advisory
- MDVSA-2008:078vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227
- 29676third-party-advisory
- 29873third-party-advisory
- 29537third-party-advisory
- 29626third-party-advisory
- 20080325 rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-servermailing-list
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120
- ADV-2008-1448vdb-entry
- 30230third-party-advisory
- 28444vdb-entry
- GLSA-200804-03vendor-advisory
- FreeBSD-SA-08:05vendor-advisory
- ADV-2008-1124vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.