Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH X11UseLocalhost X11转发会话劫持漏洞
Vulnerability Description
OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH的sshd服务器为X11转发服务器所使用的监听套接字设置了SO_REUSEADDR选项，如果远程攻击者将套接字绑定到X11转发端口的话，就可以劫持X11转发会话。成功攻击要求禁用了X11UseLocalhost(非默认)且基础操作系统未经检查有效的用户ID或地址重叠便允许重新绑定端口。
CVSS Information
N/A
Vulnerability Type
N/A