• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

OpenSSH X Connections Session Hijacking Vulnerability

References:

• About the security content of Mac OS X v10.5.5 and Security Update 2008-006 (Apple)
  
• OpenBSD 4.1 Errata Page (OpenBSD)
  
• OpenBSD 4.2 Errata Page (OpenBSD)
  
• OpenBSD 4.3 Errata Page (OpenBSD)
  
• OpenSSH 5.0 release notes (OpenSSH)
  
• OpenSSH Homepage (OpenSSH)
  
• Release Name: 2.1.2 (Tevfik Karagulle)
  
• ssh: unprivileged users may hijack forwarded X connections by listening on port (Timo Juhani Lindfors)
  
• HPSBUX02337 SSRT080072 rev.1 - HP-UX Running HP-UX Secure Shell, Local Unauthori (security-alert@hp.com)
  
• AIX OpenSSH multiple vulnerabilities (IBM)
  
• ASA-2008-205 (Avaya)
  
• Globus Security Advisory 2008-01: GSI-OpenSSH vulnerability (Globus)
  
• Security Updates in 7.0 SP1 (Attachmate)
  
• Sun Alert ID: 237444 (Sun Microsystems)