Vulnerability-Lookup

BDU:2015-01959 (CVE-2006-5051)

Vulnerability from fstec – Published: 2016-07-07 – Updated: 2025-03-21 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета openssh-client-udeb операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

9.3 (High) CVSS 2.0


                      
                        AV:N/AC:M/Au:N/C:C/I:C/A:C

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-415 - Повторное освобождение

Aliases

CVE-2006-5051, CVE-2008-4109, DSA-1638, ID:1400347

References

4 references

URL
http://www.debian.org/security/dsa-1638/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.12/

Impacted products

2 products from 2 vendors

Vendors

Сообщество свободного программного обеспечения, АО «НППКТ»

Products

Debian GNU/Linux, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)

Versions

до 4 (Debian GNU/Linux), до 2.12 (ОСОН ОСнова Оnyx)

Product types

Operating system

Platforms

АО «НППКТ» ОСОН ОСнова Оnyx до 2.12 (запись в едином реестре российских программ №5913)

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 4: ppc: openssh-client-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 openssh-client - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 s390x: openssh-server - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-client - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 i686: ssh-askpass-gnome - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 openssh-client - 4.3p2-9etch3 hppa: openssh-client - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 sparc: openssh-client - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 x86-64: openssh-client - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 alpha: openssh-client - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 ia64: openssh-client - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 mips: openssh-client - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 noarch: ssh-krb5 - 4.3p2-9etch3 ssh - 4.3p2-9etch3 arm: openssh-client - 4.3p2-9etch3 ssh-askpass-gnome - 4.3p2-9etch3 openssh-client-udeb - 4.3p2-9etch3 openssh-server - 4.3p2-9etch3 openssh-server-udeb - 4.3p2-9etch3 Обновление программного обеспечения openssh до версии 1:9.9p2-1osnova2u1

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux), \u0434\u043e 2.12 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\topenssh-client - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\ts390x:\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-client - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\ti686:\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\topenssh-client - 4.3p2-9etch3\n\thppa:\n\t\topenssh-client - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\tsparc:\n\t\topenssh-client - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\tx86-64:\n\t\topenssh-client - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\talpha:\n\t\topenssh-client - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\tia64:\n\t\topenssh-client - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\tmips:\n\t\topenssh-client - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\tnoarch:\n\t\tssh-krb5 - 4.3p2-9etch3\n\t\tssh - 4.3p2-9etch3\n\tarm:\n\t\topenssh-client - 4.3p2-9etch3\n\t\tssh-askpass-gnome - 4.3p2-9etch3\n\t\topenssh-client-udeb - 4.3p2-9etch3\n\t\topenssh-server - 4.3p2-9etch3\n\t\topenssh-server-udeb - 4.3p2-9etch3\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f openssh \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1:9.9p2-1osnova2u1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.03.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "07.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-01959",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2006-5051, CVE-2008-4109, DSA-1638, ID:1400347",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.12  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 (CWE-415)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 openssh-client-udeb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1638/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4109\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.12/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-415",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3)"
}

CVE-2006-5051 (GCVE-0-2006-5051)

Vulnerability from cvelistv5 – Published: 2006-09-27 23:00 – Updated: 2024-08-07 19:32

Summary

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

58 references

URL	Tags
http://security.freebsd.org/advisories/FreeBSD-SA…	vendor-advisory
http://sourceforge.net/forum/forum.php?forum_id=681763
http://secunia.com/advisories/22270	third-party-advisory
http://www.arkoon.fr/upload/alertes/43AK-2006-09-…
http://www.ubuntu.com/usn/usn-355-1	vendor-advisory
http://lists.freebsd.org/pipermail/freebsd-securi…	mailing-list
http://www.vmware.com/support/vi3/doc/esx-3069097…
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignature
http://openssh.org/txt/release-4.4
http://secunia.com/advisories/24805	third-party-advisory
http://www.kb.cert.org/vuls/id/851340	third-party-advisory
http://www.openbsd.org/errata.html#ssh	vendor-advisory
http://secunia.com/advisories/22487	third-party-advisory
http://www.us-cert.gov/cas/techalerts/TA07-072A.html	third-party-advisory
http://www.arkoon.fr/upload/alertes/36AK-2006-07-…
http://security.gentoo.org/glsa/glsa-200611-06.xml	vendor-advisory
http://www.novell.com/linux/security/advisories/2…	vendor-advisory
http://secunia.com/advisories/22362	third-party-advisory
http://secunia.com/advisories/23680	third-party-advisory
http://lists.apple.com/archives/security-announce…	vendor-advisory
http://docs.info.apple.com/article.html?artnum=305214
http://secunia.com/advisories/22352	third-party-advisory
http://www.vupen.com/english/advisories/2006/4329	vdb-entry
http://secunia.com/advisories/22236	third-party-advisory
http://secunia.com/advisories/24799	third-party-advisory
http://www.vupen.com/english/advisories/2006/4018	vdb-entry
http://secunia.com/advisories/22495	third-party-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entry
http://www.securityfocus.com/bid/20241	vdb-entry
http://www.vupen.com/english/advisories/2007/1332	vdb-entry
http://www.osvdb.org/29264	vdb-entry
http://secunia.com/advisories/22823	third-party-advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories…	vendor-advisory
http://slackware.com/security/viewer.php?l=slackw…	vendor-advisory
http://www.redhat.com/support/errata/RHSA-2006-06…	vendor-advisory
http://www.openpkg.org/security/advisories/OpenPK…	vendor-advisory
http://secunia.com/advisories/22183	third-party-advisory
http://marc.info/?l=openssh-unix-dev&m=1159391417…	mailing-list
http://www.vupen.com/english/advisories/2007/0930	vdb-entry
http://www-unix.globus.org/mail_archive/security-…	mailing-list
http://secunia.com/advisories/22926	third-party-advisory
http://secunia.com/advisories/22173	third-party-advisory
http://securitytracker.com/id?1016940	vdb-entry
http://secunia.com/advisories/22208	third-party-advisory
http://www.vmware.com/support/vi3/doc/esx-9986131…
http://secunia.com/advisories/22245	third-party-advisory
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisory
http://secunia.com/advisories/22196	third-party-advisory
http://www.debian.org/security/2006/dsa-1212	vendor-advisory
http://www.redhat.com/support/errata/RHSA-2006-06…	vendor-advisory
http://secunia.com/advisories/22158	third-party-advisory
http://www.mandriva.com/security/advisories?name=…	vendor-advisory
http://www.debian.org/security/2006/dsa-1189	vendor-advisory
http://support.avaya.com/elmodocs2/security/ASA-2…
http://secunia.com/advisories/24479	third-party-advisory
http://www.openwall.com/lists/oss-security/2024/07/01/3	mailing-list
http://www.openwall.com/lists/oss-security/2024/07/28/3	mailing-list
https://www.openwall.com/lists/oss-security/2024/…

Date Public

2006-09-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:32:23.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FreeBSD-SA-06:22",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
          },
          {
            "name": "22270",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22270"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf"
          },
          {
            "name": "USN-355-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-355-1"
          },
          {
            "name": "[freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.openssh",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11387",
            "tags": [
              "vdb-entry",
              "signature",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssh.org/txt/release-4.4"
          },
          {
            "name": "24805",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24805"
          },
          {
            "name": "VU#851340",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/851340"
          },
          {
            "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/errata.html#ssh"
          },
          {
            "name": "22487",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22487"
          },
          {
            "name": "TA07-072A",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf"
          },
          {
            "name": "GLSA-200611-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
          },
          {
            "name": "SUSE-SA:2006:062",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
          },
          {
            "name": "22362",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22362"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "name": "22352",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22352"
          },
          {
            "name": "ADV-2006-4329",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4329"
          },
          {
            "name": "22236",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22236"
          },
          {
            "name": "24799",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24799"
          },
          {
            "name": "ADV-2006-4018",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4018"
          },
          {
            "name": "22495",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22495"
          },
          {
            "name": "openssh-signal-handler-race-condition(29254)",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254"
          },
          {
            "name": "20241",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20241"
          },
          {
            "name": "ADV-2007-1332",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1332"
          },
          {
            "name": "29264",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29264"
          },
          {
            "name": "22823",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22823"
          },
          {
            "name": "FreeBSD-SA-06:22.openssh",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
          },
          {
            "name": "SSA:2006-272-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
          },
          {
            "name": "RHSA-2006:0697",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
          },
          {
            "name": "OpenPKG-SA-2006.022",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
          },
          {
            "name": "22183",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22183"
          },
          {
            "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
          },
          {
            "name": "ADV-2007-0930",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
          },
          {
            "name": "22926",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22926"
          },
          {
            "name": "22173",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22173"
          },
          {
            "name": "1016940",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016940"
          },
          {
            "name": "22208",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22208"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "22245",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22245"
          },
          {
            "name": "20061001-01-P",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
          },
          {
            "name": "22196",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22196"
          },
          {
            "name": "DSA-1212",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1212"
          },
          {
            "name": "RHSA-2006:0698",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
          },
          {
            "name": "22158",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22158"
          },
          {
            "name": "MDKSA-2006:179",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
          },
          {
            "name": "DSA-1189",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1189"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
          },
          {
            "name": "24479",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24479"
          },
          {
            "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
          },
          {
            "name": "[oss-security] 20240728 Re: Announce: OpenSSH 9.8 released",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/28/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2024/07/28/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-09-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-29T00:34:17.921Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FreeBSD-SA-06:22",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
        },
        {
          "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
        },
        {
          "name": "22270",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22270"
        },
        {
          "url": "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf"
        },
        {
          "name": "USN-355-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/usn-355-1"
        },
        {
          "name": "[freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.openssh",
          "tags": [
            "mailing-list"
          ],
          "url": "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html"
        },
        {
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11387",
          "tags": [
            "vdb-entry",
            "signature"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387"
        },
        {
          "url": "http://openssh.org/txt/release-4.4"
        },
        {
          "name": "24805",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24805"
        },
        {
          "name": "VU#851340",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://www.kb.cert.org/vuls/id/851340"
        },
        {
          "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.openbsd.org/errata.html#ssh"
        },
        {
          "name": "22487",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22487"
        },
        {
          "name": "TA07-072A",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "url": "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf"
        },
        {
          "name": "GLSA-200611-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
        },
        {
          "name": "SUSE-SA:2006:062",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
        },
        {
          "name": "22362",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22362"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "APPLE-SA-2007-03-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "name": "22352",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22352"
        },
        {
          "name": "ADV-2006-4329",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4329"
        },
        {
          "name": "22236",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22236"
        },
        {
          "name": "24799",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24799"
        },
        {
          "name": "ADV-2006-4018",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4018"
        },
        {
          "name": "22495",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22495"
        },
        {
          "name": "openssh-signal-handler-race-condition(29254)",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254"
        },
        {
          "name": "20241",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/20241"
        },
        {
          "name": "ADV-2007-1332",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1332"
        },
        {
          "name": "29264",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.osvdb.org/29264"
        },
        {
          "name": "22823",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22823"
        },
        {
          "name": "FreeBSD-SA-06:22.openssh",
          "tags": [
            "vendor-advisory"
          ],
          "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
        },
        {
          "name": "SSA:2006-272-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
        },
        {
          "name": "RHSA-2006:0697",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
        },
        {
          "name": "OpenPKG-SA-2006.022",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
        },
        {
          "name": "22183",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22183"
        },
        {
          "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
          "tags": [
            "mailing-list"
          ],
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
        },
        {
          "name": "ADV-2007-0930",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
        },
        {
          "name": "22926",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22926"
        },
        {
          "name": "22173",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22173"
        },
        {
          "name": "1016940",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://securitytracker.com/id?1016940"
        },
        {
          "name": "22208",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22208"
        },
        {
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "name": "22245",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22245"
        },
        {
          "name": "20061001-01-P",
          "tags": [
            "vendor-advisory"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
        },
        {
          "name": "22196",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22196"
        },
        {
          "name": "DSA-1212",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1212"
        },
        {
          "name": "RHSA-2006:0698",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
        },
        {
          "name": "22158",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22158"
        },
        {
          "name": "MDKSA-2006:179",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
        },
        {
          "name": "DSA-1189",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1189"
        },
        {
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
        },
        {
          "name": "24479",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24479"
        },
        {
          "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
        },
        {
          "name": "[oss-security] 20240728 Re: Announce: OpenSSH 9.8 released",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/07/28/3"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2024/07/28/3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-5051",
    "datePublished": "2006-09-27T23:00:00.000Z",
    "dateReserved": "2006-09-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:32:23.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-4109 (GCVE-0-2008-4109)

Vulnerability from cvelistv5 – Published: 2008-09-17 18:06 – Updated: 2024-08-07 10:00

Summary

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-24 17:46 UTC

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
http://www.ubuntu.com/usn/usn-649-1	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entry
http://secunia.com/advisories/31885	third-party-advisory
http://www.securitytracker.com/id?1020891	vdb-entry
http://www.debian.org/security/2008/dsa-1638	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://secunia.com/advisories/32080	third-party-advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678
http://secunia.com/advisories/32181	third-party-advisory
http://www.openwall.com/lists/oss-security/2024/07/01/3	mailing-list

Date Public

2008-09-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2008-4109",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-24T17:46:27.119928Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-24T17:46:34.087Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:00:42.727Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-649-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-649-1"
          },
          {
            "name": "openssh-signalhandler-dos(45202)",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45202"
          },
          {
            "name": "31885",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31885"
          },
          {
            "name": "1020891",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020891"
          },
          {
            "name": "DSA-1638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1638"
          },
          {
            "name": "SUSE-SR:2008:020",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html"
          },
          {
            "name": "32080",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32080"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678"
          },
          {
            "name": "32181",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32181"
          },
          {
            "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-09-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-01T10:06:08.789Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-649-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/usn-649-1"
        },
        {
          "name": "openssh-signalhandler-dos(45202)",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45202"
        },
        {
          "name": "31885",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/31885"
        },
        {
          "name": "1020891",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id?1020891"
        },
        {
          "name": "DSA-1638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1638"
        },
        {
          "name": "SUSE-SR:2008:020",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html"
        },
        {
          "name": "32080",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/32080"
        },
        {
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678"
        },
        {
          "name": "32181",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/32181"
        },
        {
          "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4109",
    "datePublished": "2008-09-17T18:06:00.000Z",
    "dateReserved": "2008-09-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:00:42.727Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-01959 (CVE-2006-5051)

CVE-2006-5051 (GCVE-0-2006-5051)

CVE-2008-4109 (GCVE-0-2008-4109)

Tags

Sightings

Nomenclature

Related by attack behaviour