CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to…

published September 12, 2007

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02374 · 83.6th percentile
Published
2007-09-12T01:00Z
EPSS history
Timeline
  • 12 SEP 01:00Z
    ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to…
    cvelistv5