CVE-2008-1483

OpenSSH - Local X Connection Hijacking via DISPLAY Environment Variable

Title source: llm

Description

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

References (54)

Core 54

Core References

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1123/references

Various Sources x_refsource_confirm

http://support.attachmate.com/techdocs/2374.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2008/dsa-1576

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29554

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1526/references

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1630/references

Various Sources mailing-list x_refsource_mlist

http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29686

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31531

Various Sources vendor-advisory x_refsource_slackware

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188

Various Sources x_refsource_confirm

http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc

Vendor Advisory vendor-advisory x_refsource_hp

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/41438

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/597-1/

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1

Issue Tracking x_refsource_confirm

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-2397

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1624/references

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2584

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30249

Various Sources vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29735

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29683

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30361

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31882

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29721

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2396

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29522

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30086

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29939

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30347

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/0994/references

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1019707

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2008:078

Product x_refsource_confirm

http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29676

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29873

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29537

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29626

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/490054/100/0/threaded

Third Party Advisory x_refsource_confirm

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1448/references

Vendor Advisory vendor-advisory x_refsource_netbsd

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30230

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/28444

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml

Various Sources vendor-advisory x_refsource_freebsd

http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1124/references

Scores

EPSS 0.0020

EPSS Percentile 41.9%

Details

CWE

CWE-264

Status published

Products (1)

openbsd/openssh 4.3p2

Published Mar 24, 2008

Tracked Since Feb 18, 2026