CVE-2005-2797

Published: Sep 6, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.

Affected (1)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 4.0

References (24)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt (unsafe URL)

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt (unsafe URL)

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=112605977304049&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/16686

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/18010

Source: secalert@redhat.com

http://secunia.com/advisories/18661

Source: secalert@redhat.com

http://secunia.com/advisories/19243

Source: secalert@redhat.com

http://securitytracker.com/id?1014845

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm

Source: secalert@redhat.com

http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.osvdb.org/19142

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14727

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt (unsafe URL)