(Sun Solaris is Affected) OpenSSH Lets Local Users Hijack Forwarded X Sessions in Certain Cases

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1019973

SecurityTracker URL: http://securitytracker.com/id/1019973

CVE Reference: CVE-2008-1483 (Links to External Site)

Date: May 7 2008

Impact: User access via local system

Vendor Confirmed: Yes

Version(s): 4.3p2, possibly other versions

Description: A vulnerability was reported in OpenSSH. A local user can hijack a target user's X session.

If the specified X11 forwarding port is in use via IPv4 but not in use by IPv6, the server does not properly select a different port. A local user can hijack forwarded X connections.

Timo Juhani Lindfors reported this vulnerability.

Impact: A local user can hijack forwarded X connections.

Solution: Sun is working on a fix for Solaris.

The Sun advisory is available at:

http://sunsolve.sun.com/search/document.do?assetkey=1-66-237444-1

Vendor URL: www.openssh.org/ (Links to External Site)

Cause: Access control error

Underlying OS: UNIX (Solaris - SunOS)

Message History: This archive entry is a follow-up to the message listed below.

Date: Tue, 6 May 2008 23:47:32 -0400
Subject: http://sunsolve.sun.com/search/document.do?assetkey=1-66-237444-1



CVE-2008-1483