tocsin

Debian/openssh: unknown

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as

Action: Upgrade openssh to 1:4.7p1-5 or later.

Affected

introducedfixedlast affected
01:4.7p1-5-

Fixed versions

1:4.7p1-5

Sources

published · modified · JSON