Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

openssh may set DISPLAY even if it's unable to listen on respective port

🗓️ 05 Oct 2005 11:54:00Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 7 Views

OpenSSH may set DISPLAY for a forwarded X display even if port 6010 is not listening, enabling local hijacking.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in OpenSSH
7 Dec 202322:45
–ibm
IBM Security Bulletins		Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in OpenSSH
7 Dec 202322:45
–ibm
IBM Security Bulletins		Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in OpenSSH
7 Dec 202322:45
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in OpenSSH affect IBM BladeCenter Advanced Management Module (AMM)
3 Oct 201816:05
–ibm
Tenable Nessus		OpenSSH < 5.0 X11 Forwarding Local Session Hijacking
3 Apr 200800:00
–nessus
Tenable Nessus		Attachmate Reflection for Secure IT UNIX Server < 7.0 SP1 Multiple Vulnerabilities
20 Aug 200800:00
–nessus
Tenable Nessus		Mac OS X < 10.5.5 Multiple Vulnerabilities
16 Sep 200800:00
–nessus
Tenable Nessus		AIX OpenSSH Advisory : ssh_advisory.asc
16 Apr 201400:00
–nessus
Tenable Nessus		Attachmate Reflection for Secure IT UNIX server < 7.0 SP1 Multiple Vulnerabilities
20 Aug 200800:00
–nessus
Tenable Nessus		CentOS 4 : openssh (CESA-2005:527)
29 Jun 201300:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux4i386openssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.i386.rpm
Red Hat Enterprise Linux4ia64openssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.ia64.rpm
Red Hat Enterprise Linux4ppcopenssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.ppc.rpm
Red Hat Enterprise Linux4s390openssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.s390.rpm
Red Hat Enterprise Linux4s390xopenssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.s390x.rpm
Red Hat Enterprise Linux4x86_64openssh0:3.9p1-8.RHEL4.9openssh-0:3.9p1-8.RHEL4.9.x86_64.rpm
Red Hat Enterprise Linux4i386openssh-askpass0:3.9p1-8.RHEL4.9openssh-askpass-0:3.9p1-8.RHEL4.9.i386.rpm
Red Hat Enterprise Linux4ia64openssh-askpass0:3.9p1-8.RHEL4.9openssh-askpass-0:3.9p1-8.RHEL4.9.ia64.rpm
Red Hat Enterprise Linux4ppcopenssh-askpass0:3.9p1-8.RHEL4.9openssh-askpass-0:3.9p1-8.RHEL4.9.ppc.rpm
Red Hat Enterprise Linux4s390openssh-askpass0:3.9p1-8.RHEL4.9openssh-askpass-0:3.9p1-8.RHEL4.9.s390.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
25 Jun 2026 10:32Current
7.1High risk
Vulners AI Score7.1
CVSS 26.9
EPSS0.00346
OpenSSHwindow display forwardingport 6010cookie sniffinglocal hijack
7