CVE-2008-1483
CVE-2008-1483 is a medium-severity vulnerability in Openbsd Openssh with a CVSS 2.0 base score of 6.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-264.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.9)
- EPSS exploit prediction: 0% (27th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-264
- Affected product: Openbsd Openssh
- Published:
- Last modified:
Description
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
Frequently asked questions
- What is CVE-2008-1483?
- OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
- How severe is CVE-2008-1483?
- CVE-2008-1483 has a CVSS 2.0 base score of 6.9, rated medium severity.
- Is CVE-2008-1483 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2008-1483?
- CVE-2008-1483 affects Openbsd Openssh. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2008-1483?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2008-1483 published?
- CVE-2008-1483 was published on 2008-03-24 and last updated on 2026-06-16.
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc
- http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html
- http://secunia.com/advisories/29522
- http://secunia.com/advisories/29537
- http://secunia.com/advisories/29554
- http://secunia.com/advisories/29626
- http://secunia.com/advisories/29676
- http://secunia.com/advisories/29683
- http://secunia.com/advisories/29686
- http://secunia.com/advisories/29721
- http://secunia.com/advisories/29735
- http://secunia.com/advisories/29873
- http://secunia.com/advisories/29939
- http://secunia.com/advisories/30086
- http://secunia.com/advisories/30230
- http://secunia.com/advisories/30249
- http://secunia.com/advisories/30347
- http://secunia.com/advisories/30361
- http://secunia.com/advisories/31531
- http://secunia.com/advisories/31882
- http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc
- http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1
- http://support.attachmate.com/techdocs/2374.html
- http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm
Affected products (1)
- cpe:2.3:a:openbsd:openssh:4.3p2:*:*:*:*:*:*:*
More vulnerabilities in Openbsd Openssh
- CVE-2003-0786 — Critical (CVSS 10.0): The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled,…
- CVE-2003-0693 — Critical (CVSS 10.0): A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to…
- CVE-2002-0640 — Critical (CVSS 10.0): Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large…
- CVE-2001-0144 — Critical (CVSS 10.0): CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH…
- CVE-2000-0999 — Critical (CVSS 10.0): Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers…
- CVE-2000-0525 — Critical (CVSS 10.0): OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute…
All CVEs affecting Openbsd Openssh →
Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities
- CVE-2016-8363 — Critical (CVSS 10.0): An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232…
- CVE-2016-7457 — Critical (CVSS 10.0): VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt…
- CVE-2015-7425 — Critical (CVSS 10.0): The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data…
- CVE-2015-8267 — Critical (CVSS 10.0): The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self…
- CVE-2015-7919 — Critical (CVSS 10.0): SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of…
- CVE-2015-7071 — Critical (CVSS 10.0): The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for…
Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →