CVE-2015-5352 in OpenSSH
요약 (영어)
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2015. 07. 01.
공개
2015. 08. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 76326 | OpenSSH XSECURITY 권한 상승 | 264 | 입증되지 않음 | 공식 수정 | CVE-2015-5352 |