CVE-2008-3259

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-22 · updated 2026-06-16
Weakness: CWE-200

Description

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

Affected products

OpenSSH: through 5.0; 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3 (+64)

References

http://openssh.com/security.html
http://secunia.com/advisories/31179
http://www.openssh.com/txt/release-5.1
http://www.securityfocus.com/bid/30339
http://www.securitytracker.com/id?1020537
http://www.vupen.com/english/advisories/2008/2148
https://exchange.xforce.ibmcloud.com/vulnerabilities/43940
http://openssh.com/security.html
http://secunia.com/advisories/31179
http://www.openssh.com/txt/release-5.1
http://www.securityfocus.com/bid/30339
http://www.securitytracker.com/id?1020537

Get alerted when CVE-2008-3259 or the next vulnerability affects your stack