medium5.1
CVE-2000-0217
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Impact
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | Version 1.2 |
| Ssh | Ssh | Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5 |
| Ssh | Ssh2 | Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |