CVE-2015-5352 in OpenSSH
Zusammenfassung (Englisch)
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
01.07.2015
Veröffentlichung
02.08.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 76326 | OpenSSH XSECURITY erweiterte Rechte | 264 | Unbewiesen | Offizieller Fix | CVE-2015-5352 |