PT-2008-1128 · Openbsd+4 · Openssh+4

Timo Juhani Lindfors · Published 2005-10-05 · Updated 2024-07-08 · CVE-2008-1483

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 4.7 p1-r6 OpenSSH version 4.3p2

Description The issue allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. This can be demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs. Exploitation of the vulnerabilities may lead to disruption of confidentiality, integrity, and availability of protected information.

Recommendations For OpenSSH versions prior to 4.7 p1-r6, update to version 4.7 p1-r6 or later to resolve the issue. For OpenSSH version 4.3p2, consider disabling the forwarding of X connections as a temporary workaround until a patch is available. Restrict access to the associated port to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-9513

BDU:2015-09635

CVE-2008-1483

DSA-1576-1

HPSBUX02337

OPENSUSE-SU-2024:11124-1

RHSA-2005:527

RHSA-2005_527

SUSE-SU-2017:3230-1

SUSE-SU-2017_3230-1

SUSE-SU-2018:2275-1

SUSE-SU-2018:2685-1

SUSE-SU-2018:2719-1

SUSE-SU-2018_2275-1

SUSE-SU-2018_2685-1

SUSE-SU-2018_2719-1

Affected Products

Alt Linux

Hp-Ux

Openssh

Red Hat

Suse

References · 455

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb · Exploit
• 🔥 https://github.com/Rhynorater/CVE-2018-15473-Exploit · Exploit
• 🔥 https://github.com/zgzhang/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/xaitax/CVE-2024-6387_Check · Exploit
• 🔥 https://github.com/acrono/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/asterictnl-lvdw/CVE-2024-6387 · Exploit
• 🔥 https://github.com/cpandya2909/CVE-2020-15778 · Exploit
• 🔥 https://github.com/lflare/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/epi052/cve-2018-15473 · Exploit
• 🔥 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210 · Exploit
• 🔥 https://github.com/Christbowel/CVE-2023-25136 · Exploit
• 🔥 https://github.com/l0n3m4n/CVE-2024-6387 · Exploit
• 🔥 https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker · Exploit
• 🔥 https://github.com/vin01/poc-proxycommand-vulnerable · Exploit