CVE-2007-4752
Summary
by MITRE
ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/25/2019
Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxxx Xxxxxxxx Xxxxx Xx X.x Xxx Xxxxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxxxx Xxxxx Xxxxxxxx. Xxxx Xxxx Xxxxxx Xx Xxx Xxx Xxxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxx Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xxxxxx Xxxxx Xxxxx Xx Xxxxxxxxx Xxxxxx Xxxxxx Xx Xxxxxxx Xxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxx Xxxx X Xxxxxx Xxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxxxxx Xxxxxxx Xxxx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx X Xxxxxx Xxx Xxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxx Xxxxxx Xxxx Xxx Xxxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxxxx Xxx Xxxxxxxxxx X Xxxxxxxxx Xxxxx Xx Xxxxxx Xxxxxx X Xxxxxx Xxxxxxxxx Xxxxxx Xxx Xxx X Xxxxxx Xxxxxxxxxx. Xxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxxxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxx, Xxx Xxxxxx Xxxxxxxx Xx Xxxxx X Xxxxxxx Xxx Xxxxxx Xxxx X Xxxxxxxxx Xxxxxx. Xxxx Xxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxxx Xxxxx Xxxxxxxxxxxx Xxxx Xxxxxx Xxx Xxxxx Xxxxxxx Xxx X Xxxxxx Xxx Xxx X Xxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxx Xxx-xxx, Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxxxx, Xxxxxxxxxxxx Xx Xxx Xxxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxx Xxxxxxxxxx.
Xxxx Xx Xxxxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxxx Xxxxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxxxx. Xxxx Xx Xxxxxxxx Xxx Xxxxx Xxx Xxxxxx Xx Xxx X Xxxxxxx Xxxxxx Xxxxxxx Xx Xx Xxxxxxxxx Xxx, Xxxx Xxxxxxxxxxx Xxxx Xxx Xxxxxxx Xx Xxxxxxx Xxxxxxx Xxxx Xxxxx Xxxxxxxx Xx Xxxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxx. Xxxx Xxxxx Xxxxxx Xxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xx Xxx Xxxxxx Xxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxx Xxxxxxxxxx Xxxxxxx Xxxxxx Xxx Xxxxxxxxxxx Xx Xxxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxx Xxxxxxxxx.
Xxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxx Xxxxxx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxx Xx Xxx Xxxxxx Xxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxx. Xxxxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxx Xx Xxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxxxxxxx Xxxx Xxxxxx Xx Xxxxxxxxxx Xx Xxxxxxxx Xxxxx Xx Xxxxxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxxx Xx Xxxxx-xxxx Xxxxxxxxxxxx Xxxxx Xxx Xxxxxxxxxx Xx Xxxxxxxx Xxxx, Xx Xx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx Xxx Xxxxxxxxxxxx. Xxxx Xxxx Xxxxxx Xxxx Xxx&xx Xxxxxxxxx Xxxxx Xxxxx Xxxxxx Xxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxx Xxxxxxxx, Xx Xxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxx Xxxxx Xxxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxx Xx Xxxxxxx X.x Xx Xxxxx Xxxxx Xxx Xxx Xxxxxx Xxxxxxxx Xxx Xxxx Xxxxxxxx Xxxxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxx Xxx Xxxxxxxxxx Xxxxxxxx, Xxxxxxx Xxx Xxxxxxxxxx Xxxx Xx Xx Xxx Xxxxxxxx Xxx Xxxxxxxx Xxx Xxxxx, Xxx Xxxxxxx Xxx Xxxxxxx Xxx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxx Xxxxx Xxxxxx Xx Xxxxxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxx Xxx Xxxxxxx. Xxxxxxxxxxxx, Xxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xx Xxx Xxxxxx Xxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxxx Xxxxx Xxxxxxxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxx Xxxxxxxxxx Xxxxxxxx. Xxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxxxxx-xxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxx Xxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxxxxxxxxx Xxxxxxxxxx.