CVE-2008-3259: openbsd openssh
CVSS: 1.2v2.0LowModified
Published 22-07-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-3259 is a low (CVSS 1.2) vulnerability in openbsd openssh. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24.4% of scored vulnerabilities.
CVSS score
1.2/10
010
Low · v2.0 (NVD)EPSS score
0.33%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 22-07-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.
CVSS metrics
1 score · 1 source · 1 versionLow 1.2Preferred score · NVD (NIST)
AV:L/AC:H/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
24%
Versus all other CVEs
30-day change
0.00 pp
From 0.33% on 20-09-2026
20-09-202620-10-2026
EPSS score0.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Openbsd1 product
- openssh≤ 5.0 | 1.2 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.27 | 1.3 | 1.5 | 1.5.7 | 1.5.8 | 2.1 | 2.1.1 | 2.2 | 2.3 | 2.3.1 | 2.5 | 2.5.1 | 2.5.2 | 2.9 | 2.9.9 | 2.9.9p2 | 2.9p1 | 2.9p2 | 3.0 | 3.0.1 | 3.0.1p1 | 3.0.2 | 3.0.2p1 | 3.0p1 | 3.1 | 3.1p1 | 3.2 | 3.2.2 | 3.2.2p1 | 3.2.3p1 | 3.3 | 3.3p1 | 3.4 | 3.4p1 | 3.5 | 3.5p1 | 3.6 | 3.6.1 | 3.6.1p1 | 3.6.1p2 | 3.7 | 3.7.1 | 3.7.1p1 | 3.7.1p2 | 3.8 | 3.8.1 | 3.8.1p1 | 3.9 | 3.9.1 | 3.9.1p1 | 4.0 | 4.0p1 | 4.1 | 4.1p1 | 4.2 | 4.2p1 | 4.3 | 4.3p1 | 4.3p2 | 4.4 | 4.4p1 | 4.5 | 4.6 | 4.7 | 4.8 | 4.9
1 vendor · 1 product
References
7 links- openssh.com/security.htmlX Refsource CONFIRM
- www.openssh.com/txt/release-5.1X Refsource CONFIRM