CVE-2005-2797 Misconfiguration in n/a
OpenSSH may inadvertently enable GatewayPorts when dynamic port forwarding is used without a specific listen address, allowing unauthorized network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-2797?
CVE-2005-2797 is a medium-severity vulnerability in OpenSSH, published on 6 Sep 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
Which versions are affected by CVE-2005-2797?
It affects 1 product.
Products include OpenSSH.
How do I fix CVE-2005-2797?
Upgrade to a fixed version.
Is CVE-2005-2797 being exploited?
There is no known exploitation of CVE-2005-2797 in the wild and no public exploit code.
Other vulnerabilities in OpenSSH
Sources
Also known as DEBIAN-CVE-2005-2797, GHSA-c9fh-84vx-4p2p.