CVE-2008-1483 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1483
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1483

Description: OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41438 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-597-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1 ST 1019707 SLACKWARE http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188 SAID Secunia Advisory: SA30230 Secunia Advisory: SA31531 Secunia Advisory: SA29939 Secunia Advisory: SA29873 Secunia Advisory: SA30249 Secunia Advisory: SA30361 Secunia Advisory: SA31882 Secunia Advisory: SA30086 Secunia Advisory: SA29686 Secunia Advisory: SA29735 Secunia Advisory: SA29721 Secunia Advisory: SA29537 Secunia Advisory: SA29554 Secunia Advisory: SA29626 Secunia Advisory: SA29676 Secunia Advisory: SA29683 Secunia Advisory: SA30347 Secunia Advisory: SA29522 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6085 NETBSD MLIST http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html MISC http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:078 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml FREEBSD http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc DEBIAN http://www.debian.org/security/2008/dsa-1576 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm http://support.attachmate.com/techdocs/2374.html http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120 CERT http://www.us-cert.gov/cas/techalerts/TA08-260A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/490054/100/0/threaded BID 28444 APPLE http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Return to the previous page.