NVD

Id
1430  
Name
CVE-2008-1483  
Description
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-24  
Modified Date
2014-08-08  
Seq
2008-1483  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9314 1430 CVE-2008-1483 NetBSD-SA2008-005  View
9315 1430 CVE-2008-1483 http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc  View
9316 1430 CVE-2008-1483 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011  View
9317 1430 CVE-2008-1483 HPSBUX02337  View
9318 1430 CVE-2008-1483 APPLE-SA-2008-09-15  View
9319 1430 CVE-2008-1483 SUSE-SR:2008:009  View
9320 1430 CVE-2008-1483 oval:org.mitre.oval:def:6085  View
9321 1430 CVE-2008-1483 FreeBSD-SA-08:05  View
9322 1430 CVE-2008-1483 http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227  View
9323 1430 CVE-2008-1483 237444  View
9324 1430 CVE-2008-1483 1019235  View
9325 1430 CVE-2008-1483 http://support.attachmate.com/techdocs/2374.html  View
9326 1430 CVE-2008-1483 http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm  View
9327 1430 CVE-2008-1483 20130220 OpenSSH Forwarded X Connection Session Hijack Vulnerability  View
9328 1430 CVE-2008-1483 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120  View
9329 1430 CVE-2008-1483 DSA-1576  View
9330 1430 CVE-2008-1483 GLSA-200804-03  View
9331 1430 CVE-2008-1483 [security-announce] 20080403 Globus Security Advisory 2008-01: GSI-OpenSSH vulnerability  View
9332 1430 CVE-2008-1483 MDVSA-2008:078  View
9333 1430 CVE-2008-1483 20080325 rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server  View
9334 1430 CVE-2008-1483 28444  View
9335 1430 CVE-2008-1483 1019707  View
9336 1430 CVE-2008-1483 SSA:2008-095-01  View
9337 1430 CVE-2008-1483 USN-597-1  View
9338 1430 CVE-2008-1483 TA08-260A  View
9339 1430 CVE-2008-1483 ADV-2008-0994  View
9340 1430 CVE-2008-1483 ADV-2008-1123  View
9341 1430 CVE-2008-1483 ADV-2008-1124  View
9342 1430 CVE-2008-1483 ADV-2008-1448  View
9343 1430 CVE-2008-1483 ADV-2008-1526  View
9344 1430 CVE-2008-1483 ADV-2008-1624  View
9345 1430 CVE-2008-1483 ADV-2008-1630  View
9346 1430 CVE-2008-1483 ADV-2008-2396  View
9347 1430 CVE-2008-1483 ADV-2008-2584  View
9348 1430 CVE-2008-1483 openssh-sshd-session-hijacking(41438)  View
9349 1430 CVE-2008-1483 https://issues.rpath.com/browse/RPL-2397  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45951 JVNDB-2008-001261 OpenSSH における X11-forwarded コネクション処理の不備によるセッションハイジャックの脆弱性 OpenSSH には、他のプロセスがポートを LISTENING 状態でも、ssh で DISPLAY 環境変数に :10 が設定されている場合、ローカルユーザに X コネクションを乗っ取られる脆弱性が存在します。 CVE-2008-1483 31596 CVE-2008-1483 1430 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001261.html 2008-03-24 2011-08-05 View