rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server
- From: rPath Update Announcements <announce-noreply@xxxxxxxxx>
- Date: Tue, 25 Mar 2008 12:51:04 -0400
rPath Security Advisory: 2008-0120-1
Published: 2008-03-25
Products:
rPath Linux 1
rPath Appliance Platform Linux Service 1
Rating: Major
Exposure Level Classification:
Local User Deterministic Unauthorized Access
Updated Versions:
gnome-ssh-askpass=conary.rpath.com@rpl:1/4.7p1-0.2-1
openssh=conary.rpath.com@rpl:1/4.7p1-0.2-1
openssh-client=conary.rpath.com@rpl:1/4.7p1-0.2-1
openssh-server=conary.rpath.com@rpl:1/4.7p1-0.2-1
rPath Issue Tracking System:
https://issues.rpath.com/browse/RPL-2397
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483
Description:
Previous versions of the openssh package are vulnerable to an
Unauthorized Access attack in which a local user may hijack
another local user's forwarded X connection.
http://wiki.rpath.com/Advisories:rPSA-2008-0120
Copyright 2008 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
- Prev by Date: e107 My_Gallery Plugin Arbitrary File Download Vulnerability
- Next by Date: Cuteflow Bin v1.5.0 Local File Inclusion Vuln
- Previous by thread: e107 My_Gallery Plugin Arbitrary File Download Vulnerability
- Next by thread: Cuteflow Bin v1.5.0 Local File Inclusion Vuln
- Index(es):
Relevant Pages
- [Full-disclosure] rPSA-2007-0169-1 xterm
... Products: rPath Linux 1 ... Local User Deterministic Unauthorized Access
... direct output to other users' xterm sessions. ... (Full-Disclosure) - rPSA-2007-0169-1 xterm
... Products: rPath Linux 1 ... Local User Deterministic Unauthorized Access
... direct output to other users' xterm sessions. ... (Bugtraq) - [Full-disclosure] rPSA-2007-0269-1 kernel
... rPath Security Advisory: 2007-0269-1 ... rPath Appliance Platform Linux Service
1 ... Local User Deterministic Denial of Service ... Previous versions of the kernel
package have a vulnerability which can ... (Full-Disclosure) - rPSA-2007-0269-1 kernel
... rPath Security Advisory: 2007-0269-1 ... rPath Appliance Platform Linux Service
1 ... Local User Deterministic Denial of Service ... Previous versions of the kernel
package have a vulnerability which can ... (Bugtraq) - [Full-disclosure] rPSA-2007-0114-1 mutt
... Products: rPath Linux 1 ... Local User Deterministic Privilege Escalation
... attacker-provided code. ... it is possible for a hostile server ...
(Full-Disclosure)
