CVE-2008-3259

Publication date 22 July 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

Status

Package Ubuntu Release Status
openssh 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Not affected
6.06 LTS dapper
Not affected