Vulnerability-Lookup

CVE-2004-2069 (GCVE-0-2004-2069)

Vulnerability from cvelistv5 – Published: 2005-05-05 04:00 – Updated: 2024-08-08 01:15

Summary

sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

23 references

URL	Tags
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.vmware.com/support/vi3/doc/esx-3069097…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/4502	vdb-entryx_refsource_VUPEN
http://marc.info/?l=openssh-unix-dev&m=1075203170…	mailing-listx_refsource_MLIST
http://www.osvdb.org/16567	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/22875	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23680	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vmware.com/download/esx/esx-202-200610…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/451426/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/425397/100…	vendor-advisoryx_refsource_FEDORA
http://www.vmware.com/download/esx/esx-213-200610…	x_refsource_CONFIRM
http://marc.info/?l=openssh-unix-dev&m=1075292056…	mailing-listx_refsource_MLIST
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/17000	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/14963	vdb-entryx_refsource_BID
http://secunia.com/advisories/17252	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17135	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/451404/100…	mailing-listx_refsource_BUGTRAQ
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2005-550.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/451417/100…	mailing-listx_refsource_BUGTRAQ
http://www.vmware.com/support/vi3/doc/esx-9986131…	x_refsource_CONFIRM

Date Public

2004-01-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:15:01.224Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "ADV-2006-4502",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4502"
          },
          {
            "name": "[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
          },
          {
            "name": "16567",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/16567"
          },
          {
            "name": "22875",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22875"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "openssh-sshdc-logingracetime-dos(20930)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
          },
          {
            "name": "20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
          },
          {
            "name": "FLSA-2006:168935",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
          },
          {
            "name": "[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
          },
          {
            "name": "17000",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17000"
          },
          {
            "name": "14963",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/14963"
          },
          {
            "name": "17252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17252"
          },
          {
            "name": "17135",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17135"
          },
          {
            "name": "20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:11541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
          },
          {
            "name": "RHSA-2005:550",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
          },
          {
            "name": "20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "name": "ADV-2006-4502",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4502"
        },
        {
          "name": "[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
        },
        {
          "name": "16567",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/16567"
        },
        {
          "name": "22875",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22875"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "openssh-sshdc-logingracetime-dos(20930)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
        },
        {
          "name": "20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
        },
        {
          "name": "FLSA-2006:168935",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
        },
        {
          "name": "[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
        },
        {
          "name": "17000",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17000"
        },
        {
          "name": "14963",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/14963"
        },
        {
          "name": "17252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17252"
        },
        {
          "name": "17135",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17135"
        },
        {
          "name": "20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:11541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
        },
        {
          "name": "RHSA-2005:550",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
        },
        {
          "name": "20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2004-2069",
    "datePublished": "2005-05-05T04:00:00.000Z",
    "dateReserved": "2005-05-05T00:00:00.000Z",
    "dateUpdated": "2024-08-08T01:15:01.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2004-2069",
      "date": "2026-09-20",
      "epss": "0.03366",
      "percentile": "0.88196"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A02751E9-2D38-4495-9572-8D84D71D4773",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "44CCF5CD-B434-4392-A79A-C1945D2AE30A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
        }
      ],
      "id": "CVE-2004-2069",
      "lastModified": "2024-11-20T23:52:25.450",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 5.0,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2004-12-31T05:00:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/17000"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/17135"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/17252"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/22875"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.osvdb.org/16567"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/14963"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2006/4502"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/17000"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/17135"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/17252"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/22875"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.osvdb.org/16567"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/14963"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2006/4502"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A02751E9-2D38-4495-9572-8D84D71D4773",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "44CCF5CD-B434-4392-A79A-C1945D2AE30A",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
          }
        ],
        "id": "CVE-2004-2069",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2004-12-31T05:00:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17000"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17135"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17252"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/22875"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.osvdb.org/16567"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/14963"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2006/4502"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17000"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17135"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17252"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/22875"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/16567"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/14963"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/4502"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:32:27+00:00",
      "cve": "CVE-2004-2069",
      "id": "CVE-2004-2069",
      "initial_release_date": "2004-01-27T00:00:00+00:00",
      "product_status:fixed": "148",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2004/cve-2004-2069.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2023-02-15T06:19:36Z",
      "cve": "CVE-2004-2069",
      "id": "CVE-2004-2069",
      "initial_release_date": "2023-02-15T06:19:36Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2004-2069",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2004-2069.json",
      "version": "2"
    }
  }
}

CERTA-2007-AVI-026

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées pour les produits VMware ESX Server 2.x et 3.0.x.

Description

De multiples vulnérabilités ont été découvertes dans le produit VMware ESX Server. Celles-ci concernent :

Une mauvaise gestion des droits sur les clés SSL générées par vmware-config (CVE-2006-3589) ;
certaines bibilothèques OpenSSL (CVE-2006-2937, CVE-2006-2940, CVE-2006-4339, CVE-2006-4343, CVE-2006-3738) ;
OpenSSH (CVE-2004-2069, CVE-2006-0225, CVE-2003-0386, CVE-2006-4924, CVE-2006-5051, CVE-2006-5794) ;
un débordement de tampon dans la fonction repr() utilisée par certaines applications en Python (CVE-2006-4980) ;
un problème concernant les fichiers de disques virtuels ( .vmdk ou .dsk ) nouvellement créés, qui contiennent des blocs de fichiers de disques récemment effacés.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	VMware	N/A	VMware ESX Server 3.0.x
	VMware	N/A	VMware ESX Server 2.x.

References

Title

Publication Time

CERTA-2007-AVI-026

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées pour les produits VMware ESX Server 2.x et 3.0.x.

Description

De multiples vulnérabilités ont été découvertes dans le produit VMware ESX Server. Celles-ci concernent :

Une mauvaise gestion des droits sur les clés SSL générées par vmware-config (CVE-2006-3589) ;
certaines bibilothèques OpenSSL (CVE-2006-2937, CVE-2006-2940, CVE-2006-4339, CVE-2006-4343, CVE-2006-3738) ;
OpenSSH (CVE-2004-2069, CVE-2006-0225, CVE-2003-0386, CVE-2006-4924, CVE-2006-5051, CVE-2006-5794) ;
un débordement de tampon dans la fonction repr() utilisée par certaines applications en Python (CVE-2006-4980) ;
un problème concernant les fichiers de disques virtuels ( .vmdk ou .dsk ) nouvellement créés, qui contiennent des blocs de fichiers de disques récemment effacés.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	VMware	N/A	VMware ESX Server 3.0.x
	VMware	N/A	VMware ESX Server 2.x.

References

Title

Publication Time

FKIE_CVE-2004-2069

Vulnerability from fkie_nvd - Published: 2004-12-31 05:00 - Updated: 2026-06-16 22:08

Severity

Summary

References

	URL	Tags
	secalert@redhat.com	http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2
	secalert@redhat.com	http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2
	secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2005-550.html
	secalert@redhat.com	http://secunia.com/advisories/17000
	secalert@redhat.com	http://secunia.com/advisories/17135
	secalert@redhat.com	http://secunia.com/advisories/17252
	secalert@redhat.com	http://secunia.com/advisories/22875
	secalert@redhat.com	http://secunia.com/advisories/23680
	secalert@redhat.com	http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf
	secalert@redhat.com	http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf
	secalert@redhat.com	http://www.osvdb.org/16567
	secalert@redhat.com	http://www.securityfocus.com/archive/1/425397/100/0/threaded
	secalert@redhat.com	http://www.securityfocus.com/archive/1/451404/100/0/threaded
	secalert@redhat.com	http://www.securityfocus.com/archive/1/451417/100/200/threaded
	secalert@redhat.com	http://www.securityfocus.com/archive/1/451426/100/200/threaded
	secalert@redhat.com	http://www.securityfocus.com/bid/14963
	secalert@redhat.com	http://www.vmware.com/download/esx/esx-202-200610-patch.html
	secalert@redhat.com	http://www.vmware.com/download/esx/esx-213-200610-patch.html
	secalert@redhat.com	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
	secalert@redhat.com	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
	secalert@redhat.com	http://www.vupen.com/english/advisories/2006/4502
	secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/20930
	secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541
	af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2
	af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2
	af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2005-550.html
	af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17000
	af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17135
	af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17252
	af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/22875
	af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23680
	af854a3a-2127-422b-91ae-364da2661108	http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf
	af854a3a-2127-422b-91ae-364da2661108	http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf
	af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/16567
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/425397/100/0/threaded
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/451404/100/0/threaded
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/451417/100/200/threaded
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/451426/100/200/threaded
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/14963
	af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/download/esx/esx-202-200610-patch.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/download/esx/esx-213-200610-patch.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/4502
	af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/20930
	af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541

Impacted products

	Vendor	Product	Version
	openbsd	openssh	3.6.1p2
	openbsd	openssh	3.7.1p2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A02751E9-2D38-4495-9572-8D84D71D4773",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
              "matchCriteriaId": "44CCF5CD-B434-4392-A79A-C1945D2AE30A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
    }
  ],
  "id": "CVE-2004-2069",
  "lastModified": "2026-06-16T22:08:56.250",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17000"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17135"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17252"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/22875"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/23680"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.osvdb.org/16567"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/14963"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2006/4502"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17000"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17135"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17252"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/22875"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23680"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/16567"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/14963"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/4502"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-PWVM-3XFP-52VG

Vulnerability from github – Published: 2022-04-29 03:00 – Updated: 2022-04-29 03:00

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2004-2069"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2004-12-31T05:00:00Z",
    "severity": "MODERATE"
  },
  "details": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).",
  "id": "GHSA-pwvm-3xfp-52vg",
  "modified": "2022-04-29T03:00:44Z",
  "published": "2022-04-29T03:00:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-2069"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17000"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17135"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17252"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/22875"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23680"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/16567"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/14963"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/4502"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2004-2069

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2004-2069

Aliases

CVE-2004-2069

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2004-2069",
    "description": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).",
    "id": "GSD-2004-2069",
    "references": [
      "https://www.suse.com/security/cve/CVE-2004-2069.html",
      "https://access.redhat.com/errata/RHSA-2005:550"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2004-2069"
      ],
      "details": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).",
      "id": "GSD-2004-2069",
      "modified": "2023-12-13T01:22:55.688057Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2004-2069",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://secunia.com/advisories/23680",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2",
            "refsource": "MISC",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
          },
          {
            "name": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2",
            "refsource": "MISC",
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2005-550.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
          },
          {
            "name": "http://secunia.com/advisories/17000",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17000"
          },
          {
            "name": "http://secunia.com/advisories/17135",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17135"
          },
          {
            "name": "http://secunia.com/advisories/17252",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17252"
          },
          {
            "name": "http://secunia.com/advisories/22875",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/22875"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf",
            "refsource": "MISC",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf",
            "refsource": "MISC",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
          },
          {
            "name": "http://www.osvdb.org/16567",
            "refsource": "MISC",
            "url": "http://www.osvdb.org/16567"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/425397/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/451404/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/451417/100/200/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/451426/100/200/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
          },
          {
            "name": "http://www.securityfocus.com/bid/14963",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/14963"
          },
          {
            "name": "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
          },
          {
            "name": "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2006/4502",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2006/4502"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2004-2069"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2005:550",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2005-550.html"
            },
            {
              "name": "14963",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/14963"
            },
            {
              "name": "16567",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/16567"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"
            },
            {
              "name": "17135",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17135"
            },
            {
              "name": "17252",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17252"
            },
            {
              "name": "17000",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17000"
            },
            {
              "name": "http://www.vmware.com/download/esx/esx-202-200610-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/download/esx/esx-202-200610-patch.html"
            },
            {
              "name": "http://www.vmware.com/download/esx/esx-213-200610-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/download/esx/esx-213-200610-patch.html"
            },
            {
              "name": "22875",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/22875"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
            },
            {
              "name": "23680",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23680"
            },
            {
              "name": "ADV-2006-4502",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/4502"
            },
            {
              "name": "[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107520317020444\u0026w=2"
            },
            {
              "name": "[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://marc.info/?l=openssh-unix-dev\u0026m=107529205602320\u0026w=2"
            },
            {
              "name": "openssh-sshdc-logingracetime-dos(20930)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"
            },
            {
              "name": "oval:org.mitre.oval:def:11541",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"
            },
            {
              "name": "20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/451426/100/200/threaded"
            },
            {
              "name": "20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/451417/100/200/threaded"
            },
            {
              "name": "20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/451404/100/0/threaded"
            },
            {
              "name": "FLSA-2006:168935",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-19T15:30Z",
      "publishedDate": "2004-12-31T05:00Z"
    }
  }
}

RHSA-2005:550

Vulnerability from csaf_redhat - Published: 2005-09-28 14:32 - Updated: 2026-06-25 10:32

Summary

Red Hat Security Advisory: openssh security update

Severity

Low

Scope

1 vulnerability in this advisory, including CVE-2004-2069.

CVE-2004-2069

Fixed: 88 products

https://access.redhat.com/errata/RHSA-2005:550

Open the full advisory

RHSA-2005_550

Vulnerability from csaf_redhat - Published: 2005-09-28 14:32 - Updated: 2024-11-21 23:51

Summary

Red Hat Security Advisory: openssh security update

Severity

Low

Scope

1 vulnerability in this advisory, including CVE-2004-2069.

CVE-2004-2069

Fixed: 148 products

https://access.redhat.com/errata/RHSA-2005:550

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2004-2069 (GCVE-0-2004-2069)

CERTA-2007-AVI-026

Description

Solution

CERTA-2007-AVI-026

Description

Solution

FKIE_CVE-2004-2069

GHSA-PWVM-3XFP-52VG

GSD-2004-2069

RHSA-2005:550

RHSA-2005_550

Tags

Sightings

Nomenclature

Related by attack behaviour