CVE Catalog

CVE-1999-1159

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

26th percentile - higher than 26% of all known CVEs

Summary

SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.

Risk Assessment

This may lead to unauthorized access to services running on privileged ports, posing a security risk to the system.

Recommendation

It is recommended to upgrade SSH to a newer version to mitigate this vulnerability.

Original NVD description (English source)

SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS