CVE ID:	CVE-2016-1908
Description:	The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
Test IDs:	1.3.6.1.4.1.25623.1.0.120665   1.3.6.1.4.1.25623.1.0.807245   1.3.6.1.4.1.25623.1.0.891500   1.3.6.1.4.1.25623.1.0.810768   1.3.6.1.4.1.25623.1.0.810769
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1908 BugTraq ID: 84427 http://www.securityfocus.com/bid/84427 https://security.gentoo.org/glsa/201612-18 https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html http://openwall.com/lists/oss-security/2016/01/15/13 RedHat Security Advisories: RHSA-2016:0465 http://rhn.redhat.com/errata/RHSA-2016-0465.html RedHat Security Advisories: RHSA-2016:0741 http://rhn.redhat.com/errata/RHSA-2016-0741.html http://www.securitytracker.com/id/1034705