{"id":"CVE-2008-1483","aliases":["DEBIAN-CVE-2008-1483","DSA-1576-1","EUVD-2008-1485","GHSA-m4xr-866g-83x6","RHSA-2005:527","SUSE-SU-2017:3230-1","SUSE-SU-2018:2275-1","SUSE-SU-2018:2685-1","SUSE-SU-2018:2719-1","openSUSE-SU-2024:11124-1"],"status":"published","title":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00346,"percentile":0.2834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2008-03-24T23:00:00Z","modified":"2026-10-23T17:47:47Z","fixes":[{"ecosystem":"Debian:12","package":"openssh","fixed_in":["1:4.7p1-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssh","fixed_in":["1:4.7p1-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssh","fixed_in":["1:4.7p1-5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.7p1-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.7p1-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.7p1-5"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.3p2-9etch2"}]}],"versions":["1:4.3p2-9","1:4.3p2-9etch1"],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9p1-8.RHEL4.9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-74.11.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-36.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-36.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-36.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-36.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-54.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssh-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6p1-19.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-7.4"}]}],"bundled":12}],"products":[{"vendor":"openbsd","product":"openssh"}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1123/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://support.attachmate.com/techdocs/2374.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2008/dsa-1576","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/29554","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1526/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/1630/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/29686","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://secunia.com/advisories/31531","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.540188","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41438","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://usn.ubuntu.com/597-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource","web"]},{"url":"https://issues.rpath.com/browse/RPL-2397","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/1624/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/30249","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"http://secunia.com/advisories/29735","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29683","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/30361","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/31882","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/29721","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2396","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/29522","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/30086","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29939","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/30347","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/0994/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id?1019707","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:078","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=590180\u0026group_id=69227","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/29676","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29537","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29626","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/490054/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/1448/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/30230","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/28444","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1124/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1483","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m4xr-866g-83x6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-1483","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:527","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=159331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=167444","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_527.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=439079","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1483","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173230-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1006166","tags":["report"]},{"url":"https://bugzilla.suse.com/1048367","tags":["report"]},{"url":"https://bugzilla.suse.com/1065000","tags":["report"]},{"url":"https://bugzilla.suse.com/1068310","tags":["report"]},{"url":"https://bugzilla.suse.com/1069509","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15906","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182275-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1016370","tags":["report"]},{"url":"https://bugzilla.suse.com/1017099","tags":["report"]},{"url":"https://bugzilla.suse.com/1023275","tags":["report"]},{"url":"https://bugzilla.suse.com/1053972","tags":["report"]},{"url":"https://bugzilla.suse.com/1076957","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10708","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182685-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1092582","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182719-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6111","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2008-1483","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2008-03-24T23:00:00Z","modified":"2024-08-07T08:24:42.118Z","updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1485","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2008-03-24T23:00:00Z","modified":"2024-08-07T08:24:42Z","updated_at":"2026-11-03T01:39:01.162624Z"}],"ghsa":[{"id":"GHSA-m4xr-866g-83x6","title":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2022-05-03T03:19:15Z","modified":"2023-02-01T05:01:24Z","updated_at":"2026-11-02T14:49:43.293288Z"}],"nvd":[{"id":"CVE-2008-1483","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2008-03-24T23:44:00Z","modified":"2026-06-16T22:51:49.84Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:25.857543Z"}],"osv":[{"id":"CVE-2008-1483","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2008-03-24T23:44:00Z","modified":"2026-04-10T03:39:45.417001Z","updated_at":"2026-11-02T15:43:57.178433Z"},{"id":"DEBIAN-CVE-2008-1483","description":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.","status":"published","published":"2008-03-24T23:44:00Z","modified":"2026-10-23T17:47:47.842985927Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"DSA-1576-1","title":"openssh openssh-blacklist - predictable randomness","status":"published","published":"2008-05-14T00:00:00Z","modified":"2026-03-09T01:19:54.689507Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"openSUSE-SU-2024:11124-1","title":"openssh-8.4p1-7.4 on GA media","description":"These are all security issues fixed in the openssh-8.4p1-7.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:24:55.290754Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2005:527","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-09-15T15:37:23Z","modified":"2026-06-26T10:03:23Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"SUSE-SU-2017:3230-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server (bsc#1065000).\n\nBug fixes:\n\n- FIPS: Startup selfchecks (bsc#1068310).\n- FIPS: Silent complaints about unsupported key exchange methods (bsc#1006166).\n- Refine handling of sockets for X11 forwarding to remove reintroduced CVE-2008-1483 (bsc#1069509).\n- Test configuration before running daemon to prevent looping resulting in service shutdown (bsc#1048367)\n","status":"published","published":"2017-12-07T12:22:05Z","modified":"2026-02-04T04:16:16.805173Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:2275-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370).\n- CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957).\n- CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000).\n- CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509).\n\nBug fixes:\n\n- bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099)\n- bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972)\n- bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)\n","status":"published","published":"2018-08-09T13:56:33Z","modified":"2026-02-04T03:32:42.030395Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2685-1","title":"Security update for openssh","description":"This update for openssh provides the following fixes:\n\nSecurity issues fixed:\n\n- CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server (bsc#1065000).\n- CVE-2016-10012: Remove pre-auth compression support from the server to prevent possible cryptographic attacks (bsc#1016370).\n- CVE-2008-1483: Refine handling of sockets for X11 forwarding to remove reintroduced CVE-2008-1483 (bsc#1069509).\n- CVE-2016-10708: Prevent DoS due to crashes caused by out-of-sequence NEWKEYS message (bsc#1076957).\n\nBug fixes:\n\n- bsc#1017099: Enable case-insensitive hostname matching.\n- bsc#1023275: Add a new switch for printing diagnostic messages in sftp client's batch mode.\n- bsc#1048367: systemd integration to work around various race conditions.\n- bsc#1053972: Remove duplicate KEX method.\n- bsc#1092582: Add missing piece of systemd integration.\n- Remove the limit on the amount of tasks sshd can run.\n","status":"published","published":"2018-09-11T08:50:47Z","modified":"2025-05-02T04:03:48.345767Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2719-1","title":"Security update for openssh-openssl1","description":"This update for openssh-openssl1 fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2016-10708: Prevent NULL pointer dereference via an out-of-sequence\n  NEWKEYS message allowed remote attackers to cause a denial of service\n  (bsc#1076957).\n- CVE-2017-15906: The process_open function did not properly prevent write\n  operations in readonly mode, which allowed attackers to create zero-length\n  files (bsc#1065000).\n- CVE-2016-10012: The shared memory manager (associated with pre-authentication\n  compression) did not ensure that a bounds check is enforced by all compilers,\n  which might have allowed local users to gain privileges by leveraging access to\n  a sandboxed privilege-separation process, related to the m_zback and m_zlib\n  data structures (bsc#1016370).\n- CVE-2008-1483: Prevent local users from hijacking forwarded X connections by\n  causing ssh to set DISPLAY to :10, even when another process is listening on\n  the associated port. This problem was reontroduced by another patch and was\n  previously fixed by another update (bsc#1069509).\n\nThese non-security issues were fixed:\n\n- Remove duplicate KEX method (bsc#1053972)\n- New switch for printing diagnostic messages in sftp client's batch mode (bsc#1023275)\n- Enable case-insensitive hostname matching (bsc#1017099)\n","status":"published","published":"2018-09-14T14:06:53Z","modified":"2026-02-04T04:34:01.294564Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}