OpenSSH < 1.2.3 xauth Session Highjacking

According to its banner, the remote host is running a version of OpenSSH earlier than 1.2.3. Such versions are affected by a session highjacking vulnerability. By default, ssh clients negotiate to forward X connections by using the xauth program to place cookies in the authorization cache of the...

CVE-2000-0217

Technical details about CVE-2000-0217 are not provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, or remediation. Monitor for updates in the available sources.

PT-2000-1199 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. Recommendations: At the moment, the...