CVE-2008-1483: openbsd openssh

Modified

AliasesDEBIAN-CVE-2008-1483

Published 24-03-2008Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2008-1483 is a medium (CVSS 6.9) vulnerability in openbsd openssh. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 28.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.35%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 5

DSA-1576-1 OPENSUSE-SU-2024:11124-1 RHSA-2005:527 SUSE-SU-2017:3230-1 SUSE-SU-2018:2275-1 SUSE-SU-2018:2685-1+1 more

Timeline

24-03-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.35%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.35% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

openssh< 1:4.7p1-5

Openbsd1 product

openssh4.3p2

2 vendors · 2 products

References

54 links

www.vupen.com/english/advisories/2008/1123/referencesVDB EntryX Refsource VUPEN
support.attachmate.com/techdocs/2374.htmlX Refsource CONFIRM
www.debian.org/security/2008/dsa-1576Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/29554Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/1526/referencesVDB EntryX Refsource VUPEN
support.avaya.com/elmodocs2/security/ASA-2008-205.htmX Refsource CONFIRM
www.vupen.com/english/advisories/2008/1630/referencesVDB EntryX Refsource VUPEN
www.globus.org/mail_archive/security-announce/2008/04/msg00000.htmlMailing ListX Refsource MLIST
secunia.com/advisories/29686Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlVendor AdvisoryX Refsource APPLE

Show all 54 references

secunia.com/advisories/31531Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188Vendor AdvisoryX Refsource SLACKWARE
aix.software.ibm.com/aix/efixes/security/ssh_advisory.ascX Refsource CONFIRM
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841Vendor AdvisoryX Refsource HP
exchange.xforce.ibmcloud.com/vulnerabilities/41438VDB EntryX Refsource XF
usn.ubuntu.com/597-1/Vendor AdvisoryX Refsource UBUNTU
sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1Vendor AdvisoryX Refsource SUNALERT
bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011X Refsource CONFIRM
www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
issues.rpath.com/browse/RPL-2397X Refsource CONFIRM
www.vupen.com/english/advisories/2008/1624/referencesVDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2008/2584VDB EntryX Refsource VUPEN
secunia.com/advisories/30249Third Party AdvisoryX Refsource SECUNIAVendor Advisory
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483Vendor AdvisoryX Refsource CISCO
secunia.com/advisories/29735Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29683Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30361Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31882Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29721Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/2396VDB EntryX Refsource VUPEN
secunia.com/advisories/29522Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30086Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29939Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30347Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085VDB EntrySignatureX Refsource OVAL
www.vupen.com/english/advisories/2008/0994/referencesVDB EntryX Refsource VUPEN
www.securitytracker.com/id?1019707VDB EntryX Refsource SECTRACK
sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1Vendor AdvisoryX Refsource SUNALERT
www.mandriva.com/security/advisories?name=MDVSA-2008:078Vendor AdvisoryX Refsource MANDRIVA
sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227X Refsource CONFIRM
secunia.com/advisories/29676Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29873Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29537Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29626Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/490054/100/0/threadedMailing ListX Refsource BUGTRAQ
wiki.rpath.com/wiki/Advisories:rPSA-2008-0120X Refsource CONFIRM
www.vupen.com/english/advisories/2008/1448/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/30230Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/28444VDB EntryX Refsource BID
www.gentoo.org/security/en/glsa/glsa-200804-03.xmlVendor AdvisoryX Refsource GENTOO
security.freebsd.org/advisories/FreeBSD-SA-08:05.openssh.ascVendor AdvisoryX Refsource FREEBSD
www.vupen.com/english/advisories/2008/1124/referencesVDB EntryX Refsource VUPEN
security-tracker.debian.org/tracker/CVE-2008-1483Advisory