| Package | Affected versions | Patched versions |
|---|---|---|
| openssh | = 1.2 | |
| ssh | = 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.12= 1.2.13= 1.2.14= 1.2.15= 1.2.16= 1.2.17= 1.2.18= 1.2.19= 1.2.2= 1.2.20= 1.2.21= 1.2.22= 1.2.23= 1.2.24= 1.2.25= 1.2.26= 1.2.27= 1.2.28= 1.2.29= 1.2.3= 1.2.30= 1.2.31= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9 | |
| ssh2 | = 2.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9 |
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free