|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
OpenSSH Information for VU#363181
| Date Notified | |
| Date Modified | 05/30/2002 04:23:19 PM |
| Status Summary | Vulnerable |
Vendor Statement"All versions of OpenSSH prior to 2.3.0 are affected.... If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup. This is the correct behaviour. However, when the ssh client receives an actual request asking for access to the ssh-agent, the client fails to check whether this feature has been negotiated during session setup. The client does not check whether the request is in compliance with the client configuration and grants access to the ssh-agent. A similar problem exists in the X11 forwarding implementation.... Hostile servers can access your X11 display or your ssh-agent."US-CERT AddendumThe CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
