7.5

CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.

Data is provided by the National Vulnerability Database (NVD)
Openbsd ≫ Openssh Version <= 4.6
Openbsd ≫ Openssh Version4.0
Openbsd ≫ Openssh Version4.0p1
Openbsd ≫ Openssh Version4.1
Openbsd ≫ Openssh Version4.1p1
Openbsd ≫ Openssh Version4.2
Openbsd ≫ Openssh Version4.2p1
Openbsd ≫ Openssh Version4.3
Openbsd ≫ Openssh Version4.3p1
Openbsd ≫ Openssh Version4.3p2
Openbsd ≫ Openssh Version4.4
Openbsd ≫ Openssh Version4.4p1
Openbsd ≫ Openssh Version4.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.37% 0.844
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.