Vulnerability in Openbsd Openssh

CVE-2005-2797

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

References