CVE-2008-3259

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms…

published July 22, 2008

CVSS
—
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.4th percentile
Published
2008-07-22T16:00Z
EPSS history
Timeline
  • 22 JUL 16:00Z
    OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms…
    cvelistv5