Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1483
HistoryMar 24, 2008 - 12:00 a.m.

CVE-2008-1483

2008-03-2400:00:00
ubuntu.com
ubuntu.com
13

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%

OpenSSH 4.3p2, and probably other versions, allows local users to hijack
forwarded X connections by causing ssh to set DISPLAY to :10, even when
another process is listening on the associated port, as demonstrated by
opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchopenssh< 1:4.2p1-7ubuntu3.3UNKNOWN
ubuntu6.10noarchopenssh< 1:4.3p2-5ubuntu1.2UNKNOWN
ubuntu7.04noarchopenssh< 1:4.3p2-8ubuntu1.2UNKNOWN
ubuntu7.10noarchopenssh< 1:4.6p1-5ubuntu0.2UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%