Ubuntu Security Notice (C) 2008-2015 Canonical, Inc. / NASL script (C) 2008-2015 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
Timo Juhani Lindfors discovered that the OpenSSH client, when port
forwarding was requested, would listen on any available address
family. A local attacker could exploit this flaw on systems with IPv6
enabled to hijack connections, including X11 forwards.
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 6.9
CVSS Temporal Score : 6.0
Public Exploit Available : true