CVE-2005-2797

Sažetak

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.

Reference

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt
http://marc.info/?l=bugtraq&m=112605977304049&w=2
http://secunia.com/advisories/16686
http://secunia.com/advisories/18010
http://secunia.com/advisories/18661
http://secunia.com/advisories/19243
http://securitytracker.com/id?1014845
http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm
http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html
http://www.osvdb.org/19142
http://www.securityfocus.com/bid/14727

CVSS

Base:	5.0
Impact:	2.9
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:L/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

08-12-2016 - 03:00

Objavljeno

06-09-2005 - 17:03