CVE-2007-4752

Published: Sep 12, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.

Affected (13)

Products: Openbsd: Openssh

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	version ≤ 4.6
Openbsd Openssh	Version 4.0
Openbsd Openssh	Version 4.0p1
Openbsd Openssh	Version 4.1
Openbsd Openssh	Version 4.1p1
Openbsd Openssh	Version 4.2
Openbsd Openssh	Version 4.2p1
Openbsd Openssh	Version 4.3
Openbsd Openssh	Version 4.3p1
Openbsd Openssh	Version 4.3p2
Openbsd Openssh	Version 4.4
Openbsd Openssh	Version 4.4p1
Openbsd Openssh	Version 4.5

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (60)

http://bugs.gentoo.org/show_bug.cgi?id=191321

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01271085

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html

Source: cve@mitre.org

http://secunia.com/advisories/27399

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/30249

Source: cve@mitre.org

http://secunia.com/advisories/31575

Source: cve@mitre.org

http://secunia.com/advisories/32241

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-02.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/3126

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1576

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:236

Source: cve@mitre.org

http://www.openssh.com/txt/release-4.7

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0855.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/479760/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483748/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25628

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-566-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3156

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2821

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=280471

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36637

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1706

Source: cve@mitre.org

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5599

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=191321

Source: af854a3a-2127-422b-91ae-364da2661108

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01271085

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27399

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30249

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31575

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32241

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200711-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3126

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1576

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:236

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openssh.com/txt/release-4.7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0855.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/479760/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/483748/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25628

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-566-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3156

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2821

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=280471

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/36637

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1706

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5599

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.