NVD

Id
56869  
Name
CVE-2007-4752  
Description
ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-11  
Modified Date
2014-08-08  
Seq
2007-4752  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290067 56869 CVE-2007-4752 http://bugs.gentoo.org/show_bug.cgi?id=191321  View
290068 56869 CVE-2007-4752 http://docs.info.apple.com/article.html?artnum=307562  View
290069 56869 CVE-2007-4752 HPSBUX02287  View
290070 56869 CVE-2007-4752 APPLE-SA-2008-03-18  View
290071 56869 CVE-2007-4752 SUSE-SR:2007:022  View
290072 56869 CVE-2007-4752 oval:org.mitre.oval:def:10809  View
290073 56869 CVE-2007-4752 oval:org.mitre.oval:def:5599  View
290074 56869 CVE-2007-4752 GLSA-200711-02  View
290075 56869 CVE-2007-4752 3126  View
290076 56869 CVE-2007-4752 http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm  View
290077 56869 CVE-2007-4752 DSA-1576  View
290078 56869 CVE-2007-4752 MDKSA-2007:236  View
290079 56869 CVE-2007-4752 http://www.openssh.com/txt/release-4.7  View
290080 56869 CVE-2007-4752 RHSA-2008:0855  View
290081 56869 CVE-2007-4752 20070917 FLEA-2007-0055-1 openssh openssh-client openssh-server gnome-ssh-askpass  View
290082 56869 CVE-2007-4752 20071115 Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges  View
290083 56869 CVE-2007-4752 25628  View
290084 56869 CVE-2007-4752 USN-566-1  View
290085 56869 CVE-2007-4752 ADV-2007-3156  View
290086 56869 CVE-2007-4752 ADV-2008-0924  View
290087 56869 CVE-2007-4752 ADV-2008-2821  View
290088 56869 CVE-2007-4752 openssh-x11cookie-privilege-escalation(36637)  View
290089 56869 CVE-2007-4752 https://bugzilla.redhat.com/show_bug.cgi?id=280471  View
290090 56869 CVE-2007-4752 https://issues.rpath.com/browse/RPL-1706  View
290091 56869 CVE-2007-4752 FEDORA-2007-715  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52307 JVNDB-2007-000997 OpenSSH における信頼されるクッキーの取り扱いの問題 OpenSSH の ssh には、信頼されないクッキーを作成できない場合、信頼される X11 クッキーを代わりに使用する問題が存在します。 CVE-2007-4752 28107 CVE-2007-4752 56869 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000997.html 2007-09-11 2009-07-01 View