## Description

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### openbsd - openssh

Affected Versions:

- 1.2

### ssh - ssh

Affected Versions:

- 1.2.0

### ssh - ssh

Affected Versions:

- 1.2.1

### ssh - ssh

Affected Versions:

- 1.2.2

### ssh - ssh

Affected Versions:

- 1.2.3

### ssh - ssh

Affected Versions:

- 1.2.4

### ssh - ssh

Affected Versions:

- 1.2.5

### ssh - ssh

Affected Versions:

- 1.2.6

### ssh - ssh

Affected Versions:

- 1.2.7

### ssh - ssh

Affected Versions:

- 1.2.8

### ssh - ssh

Affected Versions:

- 1.2.9

### ssh - ssh

Affected Versions:

- 1.2.10

### ssh - ssh

Affected Versions:

- 1.2.11

### ssh - ssh

Affected Versions:

- 1.2.12

### ssh - ssh

Affected Versions:

- 1.2.13

### ssh - ssh

Affected Versions:

- 1.2.14

### ssh - ssh

Affected Versions:

- 1.2.15

### ssh - ssh

Affected Versions:

- 1.2.16

### ssh - ssh

Affected Versions:

- 1.2.17

### ssh - ssh

Affected Versions:

- 1.2.18

### ssh - ssh

Affected Versions:

- 1.2.19

### ssh - ssh

Affected Versions:

- 1.2.20

### ssh - ssh

Affected Versions:

- 1.2.21

### ssh - ssh

Affected Versions:

- 1.2.22

### ssh - ssh

Affected Versions:

- 1.2.23

### ssh - ssh

Affected Versions:

- 1.2.24

### ssh - ssh

Affected Versions:

- 1.2.25

### ssh - ssh

Affected Versions:

- 1.2.26

### ssh - ssh

Affected Versions:

- 1.2.27

### ssh - ssh

Affected Versions:

- 1.2.28

### ssh - ssh

Affected Versions:

- 1.2.29

### ssh - ssh

Affected Versions:

- 1.2.30

### ssh - ssh

Affected Versions:

- 1.2.31

### ssh - ssh2

Affected Versions:

- 2.0

### ssh - ssh2

Affected Versions:

- 2.0.1

### ssh - ssh2

Affected Versions:

- 2.0.2

### ssh - ssh2

Affected Versions:

- 2.0.3

### ssh - ssh2

Affected Versions:

- 2.0.4

### ssh - ssh2

Affected Versions:

- 2.0.5

### ssh - ssh2

Affected Versions:

- 2.0.6

### ssh - ssh2

Affected Versions:

- 2.0.7

### ssh - ssh2

Affected Versions:

- 2.0.8

### ssh - ssh2

Affected Versions:

- 2.0.9

### ssh - ssh2

Affected Versions:

- 2.0.10

### ssh - ssh2

Affected Versions:

- 2.0.11

### ssh - ssh2

Affected Versions:

- 2.0.12

## References

- http://www.securityfocus.com/bid/1006
- http://www.securityfocus.com/bid/1006

Neural Processor Active