Back to search
CVE-2005-2797
Published: Sep 6, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
19243
third-party-advisory
x_refsource_SECUNIA
OpenPKG-SA-2005.019
vendor-advisory
x_refsource_OPENPKG
19142
vdb-entry
x_refsource_OSVDB
18661
third-party-advisory
x_refsource_SECUNIA
18010
third-party-advisory
x_refsource_SECUNIA
[openssh-unix-announce] 20050901 Announce: OpenSSH 4.2 released
mailing-list
x_refsource_MLIST
http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm
x_refsource_CONFIRM
14727
vdb-entry
x_refsource_BID
1014845
vdb-entry
x_refsource_SECTRACK
16686
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now