Description
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssh | 1:4.2p1-1 | — |
| Debian 13 | openssh | 1:4.2p1-1 | — |
| Debian 12 | openssh | 1:4.2p1-1 | — |
References
- 19243 third-party-advisory
- OpenPKG-SA-2005.019 vendor-advisory
- 19142 vdb-entry
- 18661 third-party-advisory
- 18010 third-party-advisory
- [openssh-unix-announce] 20050901 Announce: OpenSSH 4.2 released mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm
- 14727 vdb-entry
- 1014845 vdb-entry
- 16686 third-party-advisory