CVE-2005-2797
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.8%
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding (“-D” option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openbsd:openssh | openbsd openssh | eq | 4.0 |
References
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt
marc.info/?l=bugtraq&m=112605977304049&w=2
secunia.com/advisories/16686
secunia.com/advisories/18010
secunia.com/advisories/18661
secunia.com/advisories/19243
securitytracker.com/id?1014845
support.avaya.com/elmodocs2/security/ASA-2006-033.htm
www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html
www.osvdb.org/19142
www.securityfocus.com/bid/14727
Related
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.8%