CVE-2008-3259

Published: 22 July 2008

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

Priority

Status

Package	Release	Status
openssh Launchpad, Ubuntu, Debian	dapper	Not vulnerable (not an issue under Linux)
	feisty	Not vulnerable (not an issue under Linux)
	gutsy	Not vulnerable (not an issue under Linux)
	hardy	Not vulnerable (not an issue under Linux)
	upstream	Released (5.1)

References

https://www.cve.org/CVERecord?id=CVE-2008-3259
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.