Unrated severityNVD Advisory· Published Mar 24, 2008· Updated Jun 16, 2026
CVE-2008-1483
CVE-2008-1483
Description
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29- osv-coords26 versionspkg:rpm/opensuse/openssh&distro=openSUSE%20Tumbleweedpkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/openssh-openssl1&distro=SUSE%20Linux%20Enterprise%20Server%2011-SECURITY
< 8.4p1-7.4+ 25 more
- (no CPE)range: < 8.4p1-7.4
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 6.6p1-36.3.1
- (no CPE)range: < 6.6p1-54.15.1
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 6.6p1-54.15.1
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 6.6p1-36.3.1
- (no CPE)range: < 6.6p1-54.15.1
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 7.2p2-74.11.3
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 6.6p1-36.3.1
- (no CPE)range: < 6.6p1-54.15.2
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 6.6p1-54.15.2
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 6.6p1-36.3.1
- (no CPE)range: < 6.6p1-54.15.2
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 7.2p2-74.11.1
- (no CPE)range: < 6.6p1-19.3.1
Patches
Vulnerability mechanics
References
54- secunia.com/advisories/29522nvdVendor Advisory
- secunia.com/advisories/29537nvdVendor Advisory
- secunia.com/advisories/29554nvdVendor Advisory
- secunia.com/advisories/29626nvdVendor Advisory
- secunia.com/advisories/29676nvdVendor Advisory
- secunia.com/advisories/29683nvdVendor Advisory
- secunia.com/advisories/29686nvdVendor Advisory
- secunia.com/advisories/29721nvdVendor Advisory
- secunia.com/advisories/29735nvdVendor Advisory
- secunia.com/advisories/29873nvdVendor Advisory
- secunia.com/advisories/29939nvdVendor Advisory
- secunia.com/advisories/30086nvdVendor Advisory
- secunia.com/advisories/30230nvdVendor Advisory
- secunia.com/advisories/30249nvdVendor Advisory
- secunia.com/advisories/30361nvdVendor Advisory
- secunia.com/advisories/31531nvdVendor Advisory
- secunia.com/advisories/31882nvdVendor Advisory
- www.us-cert.gov/cas/techalerts/TA08-260A.htmlnvdUS Government Resource
- ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.ascnvd
- aix.software.ibm.com/aix/efixes/security/ssh_advisory.ascnvd
- bugs.debian.org/cgi-bin/bugreport.cginvd
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.htmlnvd
- secunia.com/advisories/30347nvd
- security.freebsd.org/advisories/FreeBSD-SA-08:05.openssh.ascnvd
- sourceforge.net/project/shownotes.phpnvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- support.attachmate.com/techdocs/2374.htmlnvd
- support.avaya.com/elmodocs2/security/ASA-2008-205.htmnvd
- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483nvd
- wiki.rpath.com/wiki/Advisories:rPSA-2008-0120nvd
- www.debian.org/security/2008/dsa-1576nvd
- www.gentoo.org/security/en/glsa/glsa-200804-03.xmlnvd
- www.globus.org/mail_archive/security-announce/2008/04/msg00000.htmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/490054/100/0/threadednvd
- www.securityfocus.com/bid/28444nvd
- www.securitytracker.com/idnvd
- www.slackware.org/security/viewer.phpnvd
- www.vupen.com/english/advisories/2008/0994/referencesnvd
- www.vupen.com/english/advisories/2008/1123/referencesnvd
- www.vupen.com/english/advisories/2008/1124/referencesnvd
- www.vupen.com/english/advisories/2008/1448/referencesnvd
- www.vupen.com/english/advisories/2008/1526/referencesnvd
- www.vupen.com/english/advisories/2008/1624/referencesnvd
- www.vupen.com/english/advisories/2008/1630/referencesnvd
- www.vupen.com/english/advisories/2008/2396nvd
- www.vupen.com/english/advisories/2008/2584nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41438nvd
- issues.rpath.com/browse/RPL-2397nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085nvd
- usn.ubuntu.com/597-1/nvd
News mentions
0No linked articles in our index yet.