CVE-2008-1483

Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 24 Mar 2008, 23:00
Last modified:07 Aug 2024, 08:24

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
6.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.2% LOW
0% probability +0.07%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Mar 2008, 23:00
Published
Vulnerability first disclosed
07 Aug 2024, 08:24
Last Modified
Vulnerability information updated

Description

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.9AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.20%• Percentile: 42%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • openbsd•openssh

    4.3p2

References (54)