Security Advisory
CVE-2000-0217
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.