Debian/openssh: unknown

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileg

Action: Upgrade openssh to 1:4.7p1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-4752#Debian:14/openssh
• https://security-tracker.debian.org/tracker/CVE-2007-4752

published 2007-09-12T01:17:00Z · modified 2026-10-21T17:47:37.455653202Z · JSON