CVE-2008-3259: OpenBSD OpenSSH

Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.

Affected products

• OpenBSD OpenSSH: up to and including 5.0; version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.27 only; …

Published 2008-07-22. Last modified 2026-06-16.