CVE-2016-1908 in OpenBSD OpenSSH
要約 (英語)
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
予約する
2016年01月15日
公開
2017年04月11日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 80656 | OpenBSD OpenSSH X11 Forwarding 特権昇格 | 254 | 未実証 | 公式な修正 | CVE-2016-1908 |