CVE-2008-1483
CVE-2008-1483
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
EPSS 0,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssh Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.7p1-5
Actualiza a 1:4.7p1-5
openssh Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.7p1-5
Actualiza a 1:4.7p1-5
openssh Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.7p1-5
Actualiza a 1:4.7p1-5
Fuentes originales
- http://www.vupen.com/english/advisories/2008/1123/references
- http://support.attachmate.com/techdocs/2374.html
- http://www.debian.org/security/2008/dsa-1576
- http://secunia.com/advisories/29554
- http://www.vupen.com/english/advisories/2008/1526/references
- http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm
- http://www.vupen.com/english/advisories/2008/1630/references
- http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html
- http://secunia.com/advisories/29686
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
- http://secunia.com/advisories/31531
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188
- http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41438
- https://usn.ubuntu.com/597-1/
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
- http://www.us-cert.gov/cas/techalerts/TA08-260A.html
- https://issues.rpath.com/browse/RPL-2397
- http://www.vupen.com/english/advisories/2008/1624/references
- http://www.vupen.com/english/advisories/2008/2584
- http://secunia.com/advisories/30249
- https://nvd.nist.gov/vuln/detail/CVE-2008-1483