[Bug 210175] Re: [openssh] [CVE-2008-1483] allows local users to hijack forwarded X connections

Wed Apr 2 00:05:00 BST 2008

This bug was fixed in the package openssh - 1:4.6p1-5ubuntu0.2

---------------
openssh (1:4.6p1-5ubuntu0.2) gutsy-security; urgency=low

  * SECURITY UPDATE: X11 forward hijacking via alternate address families.
  * channels.c: upstream fixes, patched inline.  Thanks to Nicolas Valcarcel
    (LP: #210175).
  * References
    CVE-2008-1483

 -- Kees Cook <kees at ubuntu.com>   Tue, 01 Apr 2008 10:31:42 -0700

** Changed in: openssh (Ubuntu Gutsy)
       Status: In Progress => Fix Released

** Changed in: openssh (Ubuntu Feisty)
       Status: In Progress => Fix Released

-- 
[openssh] [CVE-2008-1483] allows local users to hijack forwarded X connections
https://bugs.launchpad.net/bugs/210175
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.