CVE-2000-0217: Medium severity SSH ssh vulnerability

Published Feb 24, 2000

Updated

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.

Affected Software

46 affected components

SSH ssh=1.2.6

SSH ssh=1.2.0

SSH Ssh2=2.0.3

SSH Ssh2=2.0.8

SSH ssh=1.2.9

SSH ssh=1.2.21

SSH ssh=1.2.15

SSH Ssh2=2.0.11

SSH Ssh2=2.0.9

SSH ssh=1.2.4

SSH ssh=1.2.14

SSH ssh=1.2.19

SSH Ssh2=2.0

SSH Ssh2=2.0.5

SSH ssh=1.2.8

SSH ssh=1.2.31

SSH ssh=1.2.24

SSH ssh=1.2.18

SSH ssh=1.2.7

SSH ssh=1.2.20

OpenBSD OpenSSH=1.2

SSH ssh=1.2.3

SSH ssh=1.2.12

SSH ssh=1.2.25

SSH ssh=1.2.17

SSH Ssh2=2.0.6

SSH Ssh2=2.0.4

SSH ssh=1.2.30

SSH ssh=1.2.1

SSH ssh=1.2.26

SSH ssh=1.2.27

SSH ssh=1.2.16

SSH ssh=1.2.28

SSH Ssh2=2.0.1

SSH ssh=1.2.29

SSH ssh=1.2.11

SSH ssh=1.2.5

SSH Ssh2=2.0.10

SSH ssh=1.2.13

SSH ssh=1.2.22

SSH ssh=1.2.2

SSH ssh=1.2.23

SSH Ssh2=2.0.12

SSH ssh=1.2.10

SSH Ssh2=2.0.7

SSH Ssh2=2.0.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Configuration
Disable X forwarding in the SSH configuration (e.g., set X11Forwarding to no) to prevent a remote attacker from controlling a client's X sessions via a malicious xauth program.
OpenSSH / SSH (Secure Shell) X forwarding (X11Forwarding) = disabled

Event History

Feb 24, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Apr 10, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0217?

CVE-2000-0217 is classified as a moderate severity vulnerability due to its potential to allow unauthorized control over a client's X sessions.

How do I fix CVE-2000-0217?

To fix CVE-2000-0217, disable X11 forwarding in the SSH configuration by setting 'X11Forwarding no'.

Which versions are affected by CVE-2000-0217?

CVE-2000-0217 affects multiple versions of SSH including 1.2.0, 1.2.6, 1.2.9, and 2.0.3 among others.

What are the risks associated with CVE-2000-0217?

The risks include unauthorized remote access to graphical sessions and the potential execution of arbitrary commands on the affected system.

Is CVE-2000-0217 still a concern in modern systems?

While CVE-2000-0217 pertains to older versions of SSH, systems running outdated SSH versions may still be at risk if X forwarding is enabled.