PT-2016-3110 · Openbsd+6 · Openssh+6
Thomas Hoger
·
Publicado
2016-01-15
·
Atualizado
2025-11-30
·
CVE-2016-1908
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 7.2
Description
The issue is related to errors in security settings of the OpenSSH client, specifically with the handling of failed cookie generation for untrusted X11 forwarding. This allows a remote attacker to obtain trusted X11 forwarding privileges by leveraging configuration issues on the local X11 server, such as the lack of the SECURITY extension. The attacker can trigger a fallback and gain access to the target local X server.
Recommendations
For OpenSSH versions prior to 7.2, update to version 7.2 or later to resolve the issue.
As a temporary workaround, consider restricting access to the X11 server or disabling untrusted X11 forwarding until a patch is available.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Ibm Aix
Openssh
Red Hat
Suse
Ubuntu