CVE-2004-1653: OpenBSD OpenSSH

Medium severity, CVSS 6.4. EPSS: 11.6% chance of exploitation in the next 30 days.

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.

Affected products

• OpenBSD OpenSSH: up to and including 3.9

Published 2004-08-31. Last modified 2026-06-16.