NetSight
IP …
low1.2

CVE-2008-3259

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms t…

Impact

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

Affected products

VendorProductAffected versions
OpenbsdOpenssh
through 5.0
Versions 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27

Weakness classification

CWE-200

References