openssh: hijacking of forwarded X connections
| Package(s): | openssh | CVE #(s): | CVE-2008-1483 | ||||||||||||||||||||||||||||
| Created: | March 25, 2008 | Updated: | May 14, 2008 | ||||||||||||||||||||||||||||
| Description: | OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||