| Vulnerability Name: | CVE-2000-1169 (CCN-5517) | ||||||||
| Assigned: | 2000-11-13 | ||||||||
| Published: | 2000-11-13 | ||||||||
| Updated: | 2017-10-10 | ||||||||
| Summary: | OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: FreeBSD Security Advisory FreeBSD-SA-01:01 Hostile server OpenSSH agent/X11 forwarding Source: BUGTRAQ Type: Patch, Vendor Advisory 20001123 OpenSSH Security Advisory (adv.fwd) Source: CCN Type: BugTraq Mailing List, Mon Nov 13 2000 - 14:13:18 CST OpenSSH Security Advisory (adv.fwd) Source: BUGTRAQ Type: UNKNOWN 20001115 Trustix Security Advisory - bind and openssh (and modutils) Source: CCN Type: Conectiva Linux Announcement CLSA-2000:345 openssh: X11 and ssh-agent forwarding problems Source: CCN Type: Conectiva Linux Announcement CLSA-2000:351 openssh: X11 and ssh-agent forwarding problems Source: MITRE Type: CNA CVE-2000-1169 Source: CONECTIVA Type: UNKNOWN CLSA-2000:345 Source: SUSE Type: UNKNOWN SuSE-SA:2000:47 Source: CCN Type: RHSA-2000-111 Updated openssh packages available for Red Hat Linux 7 Source: DEBIAN Type: UNKNOWN 20001118 openssh: possible remote exploit Source: DEBIAN Type: Debian Security Advisory 20001118 openssh: possible remote exploit Source: CCN Type: US-CERT VU#363181 OpenSSH disregards client configuration and allows server access to ssh-agent and/or X11 after session negotiation Source: MANDRAKE Type: UNKNOWN MDKSA-2000:068 Source: CCN Type: OpenBSD Security Advisory, November 10, 2000 035: SECURITY FIX: November 10, 2000 Source: CCN Type: OpenSSH Web site OpenSSH for OpenBSD Source: OSVDB Type: UNKNOWN 2114 Source: OSVDB Type: UNKNOWN 6248 Source: CCN Type: OSVDB ID: 2114 Multiple SSH Client X11 Forwarding Information Disclosure Source: CCN Type: OSVDB ID: 6248 Multiple SSH Client ssh-agent Forwarding Information Disclosure Source: REDHAT Type: UNKNOWN RHSA-2000:111 Source: BID Type: Patch, Vendor Advisory 1949 Source: CCN Type: BID-1949 OpenSSH Client Unauthorized Remote Forwarding Vulnerability Source: CCN Type: SuSE Security Announcement SuSE-SA:2000:047 openssh/ssh Source: CCN Type: MandrakeSoft Security Advisory MDKSA-2000:068-1 openssh Source: XF Type: UNKNOWN openssh-unauthorized-access(5517) Source: XF Type: UNKNOWN openssh-unauthorized-access(5517) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||