CVE-2008-1483
CVE-2008-1483
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
Original sources
- http://www.vupen.com/english/advisories/2008/1123/references
- http://support.attachmate.com/techdocs/2374.html
- http://www.debian.org/security/2008/dsa-1576
- http://secunia.com/advisories/29554
- http://www.vupen.com/english/advisories/2008/1526/references
- http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm
- http://www.vupen.com/english/advisories/2008/1630/references
- http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html
- http://secunia.com/advisories/29686
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
- http://secunia.com/advisories/31531
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188
- http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41438
- https://usn.ubuntu.com/597-1/
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
- http://www.us-cert.gov/cas/techalerts/TA08-260A.html
- https://issues.rpath.com/browse/RPL-2397
- http://www.vupen.com/english/advisories/2008/1624/references
- http://www.vupen.com/english/advisories/2008/2584
- http://secunia.com/advisories/30249
- https://nvd.nist.gov/vuln/detail/CVE-2008-1483