Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-4752

21
FAUCET Score

CVE-2007-4752 describes a vulnerability in OpenSSH before version 4.7 where the ssh client improperly handles X11 forwarding when an untrusted cookie cannot be generated, defaulting to a trusted cookie. This flaw allows attackers to bypass intended security policies, potentially granting an X client elevated privileges. With a CVSS score of 7.5 (High), it presents a network-based attack with low complexity, leading to potential compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.6CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*
4.0CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*
4.0p1CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*
4.1CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*
4.1p1CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
2.37%
Probability of exploitation in next 30 days
EPSS Percentile
82.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0237 is in the 68th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openssh-0:3.9p1-11.el4_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4.5 Z StreamFixed in: openssh-0:3.9p1-10.RHEL4.20
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssh-0:4.3p2-26.el5_2.1
View patch

Vendor Advisories (1)

redhatCVE-2007-4752Low

openssh falls back to the trusted x11 cookie if generation of an untrusted cookie fails

Sep 4, 2007

References

bugs.gentoo.org / show_bug.cgi
docs.info.apple.com / article.html
h20000.www2.hp.com / bizsupport/TechSupport/Document.jsp
lists.apple.com / archives/security-announce/2008/Mar/msg00001.html
lists.opensuse.org / opensuse-security-announce/2007-10/msg00008.html
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/27399
secunia.com / advisories/29420
secunia.com / advisories/30249
secunia.com / advisories/31575
secunia.com / advisories/32241
security.gentoo.org / glsa/glsa-200711-02.xml
securityreason.com / securityalert/3126
exchange.xforce.ibmcloud.com / vulnerabilities/36637
issues.rpath.com / browse/RPL-1706
Patch
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5599
support.avaya.com / elmodocs2/security/ASA-2008-399.htm
redhat.com / archives/fedora-package-announce/2007-October/msg00214.html
debian.org / security/2008/dsa-1576
mandriva.com / security/advisories
openssh.com / txt/release-4.7
redhat.com / support/errata/RHSA-2008-0855.html
securityfocus.com / archive/1/479760/100/0/threaded
securityfocus.com / archive/1/483748/100/200/threaded
securityfocus.com / bid/25628
ubuntu.com / usn/usn-566-1
vupen.com / english/advisories/2007/3156
vupen.com / english/advisories/2008/0924/references
vupen.com / english/advisories/2008/2821