CVE-1999-1159: Medium severity ssh ssh2 vulnerability
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the SSH server to prevent local (non-root) users from requesting remote forwarding from privileged ports — e.g., disable remote port forwarding or otherwise restrict remote/privileged port forwarding so only root (or no users) can request it.
SSH (Secure Shell) remote forwarding from privileged ports = disabled for non-root users
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1159?
CVE-1999-1159 is considered a moderate vulnerability that allows local users to request remote forwarding from privileged ports.
How do I fix CVE-1999-1159?
To fix CVE-1999-1159, upgrade to SSH 2.0.12 or later to prevent local users from forwarding privileged ports.
Who is affected by CVE-1999-1159?
CVE-1999-1159 affects users of SSH version 2.0.11 and earlier.
What are the potential consequences of CVE-1999-1159?
The potential consequences of CVE-1999-1159 include unauthorized access to services through privileged port forwarding.
Can CVE-1999-1159 be exploited remotely?
CVE-1999-1159 cannot be exploited remotely, as it involves local users misusing the system's capabilities.