Description
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/19243 ↗
- http://marc.info/?l=bugtraq&m=112605977304049&w=2 ↗
- http://www.osvdb.org/19142 ↗
- http://secunia.com/advisories/18661 ↗
- http://secunia.com/advisories/18010 ↗
- http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html ↗
- http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm ↗
- http://www.securityfocus.com/bid/14727 ↗
- http://securitytracker.com/id?1014845 ↗
- http://secunia.com/advisories/16686 ↗