Bug#229547: ssh: Some X programs executed in an ssh session appear to be executed on local not remote computer.

[Brandon Davis <brandond@brandond.net>]

Package: ssh
Version: 1:3.6.1p2-11
Severity: important
I was setting up cups printing on my server to allow me to print from my
laptop (debian unstable on both). On the laptop I had mozilla-firebird
running to see the cups co\nfiguration on my laptop. The firewall on the
server will not allow me to connect to port 631, so in order to see the
cups configuration on the server I opened an ssh con\nection with X
forwarding (ssh -X servername) from a gnome-terminal. I have ssh
configured on the server for public-key authentication. In the
gnome-terminal connected to\ the server I ran mozilla-firebird to modify
the cups configuration on the server. When the firebird window opened it
contained all of the bookmarks from my laptop, not t\he server, and
localhost:631 connected me to cups on the laptop not the server. It
appears that even though I opened firebird inside the ssh connection to
the server it w\as executed on the laptop instead. It seems to me that
firebird should have been executed on the server not the laptop and that
localhost:631 should have connected me to \the server. Coincidentally,
within the same ssh session I was able to connect to the servers cups
configuration exactly as expected (at localhost:631) from w3m. I wasn't
\sure what package to file this bug against, but assumed that ssh would be
the correct one. If I can offer any assistance let me know. My email
address is brandondATbrando\nd.net


-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux falcon 2.4.24 #1 Wed Jan 14 22:51:57 PST 2004 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages ssh depends on:
ii  adduser                     3.51         Add and remove users and
groups
ii  debconf                     1.4.7        Debian configuration
management sy
ii  dpkg                        1.10.18      Package maintenance system
for Deb
ii  libc6                       2.3.2.ds1-11 GNU C Library: Shared
libraries an
ii  libpam-modules              0.76-15      Pluggable Authentication
Modules f
ii  libpam-runtime              0.76-15      Runtime support for the PAM
librar
ii  libpam0g                    0.76-15      Pluggable Authentication
Modules l
ii  libssl0.9.7                 0.9.7c-5     SSL shared libraries
ii  libwrap0                    7.6-ipv6.1-3 Wietse Venema's TCP wrappers
libra
ii  zlib1g                      1:1.2.1-3    compression library - runtime

-- debconf information:
  ssh/insecure_rshd:
  ssh/privsep_ask: true
* ssh/user_environment_tell:
* ssh/forward_warning:
  ssh/insecure_telnetd:
  ssh/new_config: true
* ssh/use_old_init_script: true
* ssh/SUID_client: true
* ssh/privsep_tell:
  ssh/ssh2_keys_merged:
* ssh/protocol2_only: true
  ssh/encrypted_host_key_but_no_keygen:
* ssh/run_sshd: true



--brandon

/* PGP keys available at MIT PGP keyserver
 * http://pgp.mit.edu
 * search for my email address
 * OR
 * gpg --keyserver pgp.mit.edu --recv-keys 0xCC5A6D0E
 */