CVE-2005-2797: OpenBSD OpenSSH

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.

Affected products

• OpenBSD OpenSSH: version 4.0 only

Published 2005-09-06. Last modified 2026-06-16.