CVE-2007-4752
CVE-2007-4752
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.
EPSS 2,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system · network
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
openssh Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 1:4.7p1-1
Mettez à jour vers 1:4.7p1-1
openssh Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 1:4.7p1-1
Mettez à jour vers 1:4.7p1-1
openssh Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 1:4.7p1-1
Mettez à jour vers 1:4.7p1-1
Sources originales
- http://www.openssh.com/txt/release-4.7
- http://security.gentoo.org/glsa/glsa-200711-02.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809
- http://www.debian.org/security/2008/dsa-1576
- http://www.securityfocus.com/bid/25628
- http://www.securityfocus.com/archive/1/479760/100/0/threaded
- http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html
- http://www.ubuntu.com/usn/usn-566-1
- http://securityreason.com/securityalert/3126
- http://www.vupen.com/english/advisories/2008/0924/references
- http://www.vupen.com/english/advisories/2008/2821
- http://secunia.com/advisories/30249
- http://www.vupen.com/english/advisories/2007/3156
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01271085
- http://secunia.com/advisories/31575
- http://www.redhat.com/support/errata/RHSA-2008-0855.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:236
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5599
- https://bugzilla.redhat.com/show_bug.cgi?id=280471
- http://secunia.com/advisories/29420
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://www.securityfocus.com/archive/1/483748/100/200/threaded
- https://nvd.nist.gov/vuln/detail/CVE-2007-4752