CVE Catalog
CVE-2000-0217
MediumExploitation Probability (EPSS)
Elevated risk0.97%
57th percentile - higher than 57% of all known CVEs
Summary
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Risk Assessment
An attacker could take control of users' X sessions, potentially leading to data leakage or system takeover.
Recommendation
It is recommended to disable X forwarding in the SSH configuration to minimize the risk of attacks.
Original NVD description (English source)
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.