csaf_redhat - rhsa-2006

rhsa-2006_0698

Vulnerability from csaf_redhat

Published

2006-09-29 00:23

Modified

2024-11-22 00:34

Summary

Red Hat Security Advisory: openssh security update

Notes

Topic

Updated openssh packages that fix several security issues in sshd are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This package includes the core files necessary for both the OpenSSH client and server. Mark Dowd discovered a signal handler race condition in the OpenSSH sshd server. A remote attacker could possibly leverage this flaw to cause a denial of service (crash). (CVE-2006-5051) The OpenSSH project believes the likelihood of successful exploitation leading to arbitrary code execution appears remote. However, the Red Hat Security Response Team have not yet been able to verify this claim due to lack of upstream vulnerability information. We are therefore including a fix for this flaw and have rated it important security severity in the event our continued investigation finds this issue to be exploitable. Tavis Ormandy of the Google Security Team discovered a denial of service bug in the OpenSSH sshd server. A remote attacker can send a specially crafted SSH-1 request to the server causing sshd to consume a large quantity of CPU resources. (CVE-2006-4924) An arbitrary command execution flaw was discovered in the way scp copies files locally. It is possible for a local attacker to create a file with a carefully crafted name that could execute arbitrary commands as the user running scp to copy files locally. (CVE-2006-0225) The SSH daemon, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address. (CVE-2003-0386) All users of openssh should upgrade to these updated packages, which contain backported patches that resolve these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated openssh packages that fix several security issues in sshd are now\navailable for Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having important security impact by the Red Hat\nSecurity Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenSSH is OpenBSD\u0027s SSH (Secure SHell) protocol implementation. This\npackage includes the core files necessary for both the OpenSSH client and\nserver.\n\nMark Dowd discovered a signal handler race condition in the OpenSSH sshd\nserver. A remote attacker could possibly leverage this flaw to cause a\ndenial of service (crash). (CVE-2006-5051) The OpenSSH project believes the\nlikelihood of successful exploitation leading to arbitrary code execution\nappears remote. However, the Red Hat Security Response Team have not yet\nbeen able to verify this claim due to lack of upstream vulnerability\ninformation. We are therefore including a fix for this flaw and have rated\nit important security severity in the event our continued investigation\nfinds this issue to be exploitable.\n\nTavis Ormandy of the Google Security Team discovered a denial of service\nbug in the OpenSSH sshd server. A remote attacker can send a specially\ncrafted SSH-1 request to the server causing sshd to consume a large\nquantity of CPU resources. (CVE-2006-4924)\n\nAn arbitrary command execution flaw was discovered in the way scp copies\nfiles locally. It is possible for a local attacker to create a file with a\ncarefully crafted name that could execute arbitrary commands as the user\nrunning scp to copy files locally. (CVE-2006-0225)\n\nThe SSH daemon, when restricting host access by numeric IP addresses and\nwith VerifyReverseMapping disabled, allows remote attackers to bypass\n\"from=\" and \"user@host\" address restrictions by connecting to a host from a\nsystem whose reverse DNS hostname contains the numeric IP address.\n(CVE-2003-0386)\n\nAll users of openssh should upgrade to these updated packages, which\ncontain backported patches that resolve these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2006:0698",
        "url": "https://access.redhat.com/errata/RHSA-2006:0698"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#important",
        "url": "http://www.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "174026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=174026"
      },
      {
        "category": "external",
        "summary": "208248",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=208248"
      },
      {
        "category": "external",
        "summary": "208298",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=208298"
      },
      {
        "category": "external",
        "summary": "208430",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=208430"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0698.json"
      }
    ],
    "title": "Red Hat Security Advisory: openssh security update",
    "tracking": {
      "current_release_date": "2024-11-22T00:34:06+00:00",
      "generator": {
        "date": "2024-11-22T00:34:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2006:0698",
      "initial_release_date": "2006-09-29T00:23:00+00:00",
      "revision_history": [
        {
          "date": "2006-09-29T00:23:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-09-28T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T00:34:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "2.1AW",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-server-0:3.1p1-21.ia64",
                "product": {
                  "name": "openssh-server-0:3.1p1-21.ia64",
                  "product_id": "openssh-server-0:3.1p1-21.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@3.1p1-21?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:3.1p1-21.ia64",
                "product": {
                  "name": "openssh-askpass-0:3.1p1-21.ia64",
                  "product_id": "openssh-askpass-0:3.1p1-21.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@3.1p1-21?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:3.1p1-21.ia64",
                "product": {
                  "name": "openssh-0:3.1p1-21.ia64",
                  "product_id": "openssh-0:3.1p1-21.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@3.1p1-21?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-0:3.1p1-21.ia64",
                "product": {
                  "name": "openssh-askpass-gnome-0:3.1p1-21.ia64",
                  "product_id": "openssh-askpass-gnome-0:3.1p1-21.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-gnome@3.1p1-21?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:3.1p1-21.ia64",
                "product": {
                  "name": "openssh-clients-0:3.1p1-21.ia64",
                  "product_id": "openssh-clients-0:3.1p1-21.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@3.1p1-21?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:3.1p1-21.src",
                "product": {
                  "name": "openssh-0:3.1p1-21.src",
                  "product_id": "openssh-0:3.1p1-21.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@3.1p1-21?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-server-0:3.1p1-21.i386",
                "product": {
                  "name": "openssh-server-0:3.1p1-21.i386",
                  "product_id": "openssh-server-0:3.1p1-21.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@3.1p1-21?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:3.1p1-21.i386",
                "product": {
                  "name": "openssh-askpass-0:3.1p1-21.i386",
                  "product_id": "openssh-askpass-0:3.1p1-21.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@3.1p1-21?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:3.1p1-21.i386",
                "product": {
                  "name": "openssh-0:3.1p1-21.i386",
                  "product_id": "openssh-0:3.1p1-21.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@3.1p1-21?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-0:3.1p1-21.i386",
                "product": {
                  "name": "openssh-askpass-gnome-0:3.1p1-21.i386",
                  "product_id": "openssh-askpass-gnome-0:3.1p1-21.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-gnome@3.1p1-21?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:3.1p1-21.i386",
                "product": {
                  "name": "openssh-clients-0:3.1p1-21.i386",
                  "product_id": "openssh-clients-0:3.1p1-21.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@3.1p1-21?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-0:3.1p1-21.src"
        },
        "product_reference": "openssh-0:3.1p1-21.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-askpass-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-askpass-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-clients-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-clients-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-server-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-server-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:openssh-server-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-server-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.src as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-0:3.1p1-21.src"
        },
        "product_reference": "openssh-0:3.1p1-21.src",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-askpass-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-askpass-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-clients-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-clients-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-server-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-server-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:openssh-server-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-server-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-0:3.1p1-21.src"
        },
        "product_reference": "openssh-0:3.1p1-21.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-askpass-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-askpass-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-clients-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-clients-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-server-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-server-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:openssh-server-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-server-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:3.1p1-21.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-0:3.1p1-21.src"
        },
        "product_reference": "openssh-0:3.1p1-21.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-askpass-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-askpass-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-askpass-gnome-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-clients-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-clients-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-clients-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-server-0:3.1p1-21.i386"
        },
        "product_reference": "openssh-server-0:3.1p1-21.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:3.1p1-21.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:openssh-server-0:3.1p1-21.ia64"
        },
        "product_reference": "openssh-server-0:3.1p1-21.ia64",
        "relates_to_product_reference": "2.1WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2003-0386",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617024"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass \"from=\" and \"user@host\" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:openssh-0:3.1p1-21.i386",
          "2.1AS:openssh-0:3.1p1-21.ia64",
          "2.1AS:openssh-0:3.1p1-21.src",
          "2.1AS:openssh-askpass-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AS:openssh-clients-0:3.1p1-21.i386",
          "2.1AS:openssh-clients-0:3.1p1-21.ia64",
          "2.1AS:openssh-server-0:3.1p1-21.i386",
          "2.1AS:openssh-server-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.i386",
          "2.1AW:openssh-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.src",
          "2.1AW:openssh-askpass-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AW:openssh-clients-0:3.1p1-21.i386",
          "2.1AW:openssh-clients-0:3.1p1-21.ia64",
          "2.1AW:openssh-server-0:3.1p1-21.i386",
          "2.1AW:openssh-server-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.i386",
          "2.1ES:openssh-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.src",
          "2.1ES:openssh-askpass-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1ES:openssh-clients-0:3.1p1-21.i386",
          "2.1ES:openssh-clients-0:3.1p1-21.ia64",
          "2.1ES:openssh-server-0:3.1p1-21.i386",
          "2.1ES:openssh-server-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.i386",
          "2.1WS:openssh-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.src",
          "2.1WS:openssh-askpass-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1WS:openssh-clients-0:3.1p1-21.i386",
          "2.1WS:openssh-clients-0:3.1p1-21.ia64",
          "2.1WS:openssh-server-0:3.1p1-21.i386",
          "2.1WS:openssh-server-0:3.1p1-21.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2003-0386"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617024",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617024"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2003-0386",
          "url": "https://www.cve.org/CVERecord?id=CVE-2003-0386"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0386",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0386"
        }
      ],
      "release_date": "2003-06-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-09-29T00:23:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "2.1AS:openssh-0:3.1p1-21.i386",
            "2.1AS:openssh-0:3.1p1-21.ia64",
            "2.1AS:openssh-0:3.1p1-21.src",
            "2.1AS:openssh-askpass-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AS:openssh-clients-0:3.1p1-21.i386",
            "2.1AS:openssh-clients-0:3.1p1-21.ia64",
            "2.1AS:openssh-server-0:3.1p1-21.i386",
            "2.1AS:openssh-server-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.i386",
            "2.1AW:openssh-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.src",
            "2.1AW:openssh-askpass-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AW:openssh-clients-0:3.1p1-21.i386",
            "2.1AW:openssh-clients-0:3.1p1-21.ia64",
            "2.1AW:openssh-server-0:3.1p1-21.i386",
            "2.1AW:openssh-server-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.i386",
            "2.1ES:openssh-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.src",
            "2.1ES:openssh-askpass-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1ES:openssh-clients-0:3.1p1-21.i386",
            "2.1ES:openssh-clients-0:3.1p1-21.ia64",
            "2.1ES:openssh-server-0:3.1p1-21.i386",
            "2.1ES:openssh-server-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.i386",
            "2.1WS:openssh-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.src",
            "2.1WS:openssh-askpass-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1WS:openssh-clients-0:3.1p1-21.i386",
            "2.1WS:openssh-clients-0:3.1p1-21.ia64",
            "2.1WS:openssh-server-0:3.1p1-21.i386",
            "2.1WS:openssh-server-0:3.1p1-21.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0698"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-0225",
      "discovery_date": "2005-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "168167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "local to local copy uses shell expansion twice",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Issue was fixed upstream in version 4.3. The openssh packages in Red Hat Enterprise Linux 5 are based on the fixed upstream version and were not affected by this flaw.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:openssh-0:3.1p1-21.i386",
          "2.1AS:openssh-0:3.1p1-21.ia64",
          "2.1AS:openssh-0:3.1p1-21.src",
          "2.1AS:openssh-askpass-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AS:openssh-clients-0:3.1p1-21.i386",
          "2.1AS:openssh-clients-0:3.1p1-21.ia64",
          "2.1AS:openssh-server-0:3.1p1-21.i386",
          "2.1AS:openssh-server-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.i386",
          "2.1AW:openssh-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.src",
          "2.1AW:openssh-askpass-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AW:openssh-clients-0:3.1p1-21.i386",
          "2.1AW:openssh-clients-0:3.1p1-21.ia64",
          "2.1AW:openssh-server-0:3.1p1-21.i386",
          "2.1AW:openssh-server-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.i386",
          "2.1ES:openssh-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.src",
          "2.1ES:openssh-askpass-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1ES:openssh-clients-0:3.1p1-21.i386",
          "2.1ES:openssh-clients-0:3.1p1-21.ia64",
          "2.1ES:openssh-server-0:3.1p1-21.i386",
          "2.1ES:openssh-server-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.i386",
          "2.1WS:openssh-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.src",
          "2.1WS:openssh-askpass-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1WS:openssh-clients-0:3.1p1-21.i386",
          "2.1WS:openssh-clients-0:3.1p1-21.ia64",
          "2.1WS:openssh-server-0:3.1p1-21.i386",
          "2.1WS:openssh-server-0:3.1p1-21.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-0225"
        },
        {
          "category": "external",
          "summary": "RHBZ#168167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=168167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-0225",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-0225"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-0225",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0225"
        }
      ],
      "release_date": "2005-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-09-29T00:23:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "2.1AS:openssh-0:3.1p1-21.i386",
            "2.1AS:openssh-0:3.1p1-21.ia64",
            "2.1AS:openssh-0:3.1p1-21.src",
            "2.1AS:openssh-askpass-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AS:openssh-clients-0:3.1p1-21.i386",
            "2.1AS:openssh-clients-0:3.1p1-21.ia64",
            "2.1AS:openssh-server-0:3.1p1-21.i386",
            "2.1AS:openssh-server-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.i386",
            "2.1AW:openssh-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.src",
            "2.1AW:openssh-askpass-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AW:openssh-clients-0:3.1p1-21.i386",
            "2.1AW:openssh-clients-0:3.1p1-21.ia64",
            "2.1AW:openssh-server-0:3.1p1-21.i386",
            "2.1AW:openssh-server-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.i386",
            "2.1ES:openssh-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.src",
            "2.1ES:openssh-askpass-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1ES:openssh-clients-0:3.1p1-21.i386",
            "2.1ES:openssh-clients-0:3.1p1-21.ia64",
            "2.1ES:openssh-server-0:3.1p1-21.i386",
            "2.1ES:openssh-server-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.i386",
            "2.1WS:openssh-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.src",
            "2.1WS:openssh-askpass-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1WS:openssh-clients-0:3.1p1-21.i386",
            "2.1WS:openssh-clients-0:3.1p1-21.ia64",
            "2.1WS:openssh-server-0:3.1p1-21.i386",
            "2.1WS:openssh-server-0:3.1p1-21.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0698"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "local to local copy uses shell expansion twice"
    },
    {
      "cve": "CVE-2006-4924",
      "discovery_date": "2006-09-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "207957"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:openssh-0:3.1p1-21.i386",
          "2.1AS:openssh-0:3.1p1-21.ia64",
          "2.1AS:openssh-0:3.1p1-21.src",
          "2.1AS:openssh-askpass-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AS:openssh-clients-0:3.1p1-21.i386",
          "2.1AS:openssh-clients-0:3.1p1-21.ia64",
          "2.1AS:openssh-server-0:3.1p1-21.i386",
          "2.1AS:openssh-server-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.i386",
          "2.1AW:openssh-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.src",
          "2.1AW:openssh-askpass-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AW:openssh-clients-0:3.1p1-21.i386",
          "2.1AW:openssh-clients-0:3.1p1-21.ia64",
          "2.1AW:openssh-server-0:3.1p1-21.i386",
          "2.1AW:openssh-server-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.i386",
          "2.1ES:openssh-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.src",
          "2.1ES:openssh-askpass-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1ES:openssh-clients-0:3.1p1-21.i386",
          "2.1ES:openssh-clients-0:3.1p1-21.ia64",
          "2.1ES:openssh-server-0:3.1p1-21.i386",
          "2.1ES:openssh-server-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.i386",
          "2.1WS:openssh-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.src",
          "2.1WS:openssh-askpass-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1WS:openssh-clients-0:3.1p1-21.i386",
          "2.1WS:openssh-clients-0:3.1p1-21.ia64",
          "2.1WS:openssh-server-0:3.1p1-21.i386",
          "2.1WS:openssh-server-0:3.1p1-21.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4924"
        },
        {
          "category": "external",
          "summary": "RHBZ#207957",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=207957"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4924",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4924"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4924",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4924"
        }
      ],
      "release_date": "2006-09-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-09-29T00:23:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "2.1AS:openssh-0:3.1p1-21.i386",
            "2.1AS:openssh-0:3.1p1-21.ia64",
            "2.1AS:openssh-0:3.1p1-21.src",
            "2.1AS:openssh-askpass-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AS:openssh-clients-0:3.1p1-21.i386",
            "2.1AS:openssh-clients-0:3.1p1-21.ia64",
            "2.1AS:openssh-server-0:3.1p1-21.i386",
            "2.1AS:openssh-server-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.i386",
            "2.1AW:openssh-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.src",
            "2.1AW:openssh-askpass-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AW:openssh-clients-0:3.1p1-21.i386",
            "2.1AW:openssh-clients-0:3.1p1-21.ia64",
            "2.1AW:openssh-server-0:3.1p1-21.i386",
            "2.1AW:openssh-server-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.i386",
            "2.1ES:openssh-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.src",
            "2.1ES:openssh-askpass-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1ES:openssh-clients-0:3.1p1-21.i386",
            "2.1ES:openssh-clients-0:3.1p1-21.ia64",
            "2.1ES:openssh-server-0:3.1p1-21.i386",
            "2.1ES:openssh-server-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.i386",
            "2.1WS:openssh-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.src",
            "2.1WS:openssh-askpass-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1WS:openssh-clients-0:3.1p1-21.i386",
            "2.1WS:openssh-clients-0:3.1p1-21.ia64",
            "2.1WS:openssh-server-0:3.1p1-21.i386",
            "2.1WS:openssh-server-0:3.1p1-21.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0698"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh DoS"
    },
    {
      "cve": "CVE-2006-5051",
      "discovery_date": "2006-09-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "208347"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "unsafe GSSAPI signal handler",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:openssh-0:3.1p1-21.i386",
          "2.1AS:openssh-0:3.1p1-21.ia64",
          "2.1AS:openssh-0:3.1p1-21.src",
          "2.1AS:openssh-askpass-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AS:openssh-clients-0:3.1p1-21.i386",
          "2.1AS:openssh-clients-0:3.1p1-21.ia64",
          "2.1AS:openssh-server-0:3.1p1-21.i386",
          "2.1AS:openssh-server-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.i386",
          "2.1AW:openssh-0:3.1p1-21.ia64",
          "2.1AW:openssh-0:3.1p1-21.src",
          "2.1AW:openssh-askpass-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1AW:openssh-clients-0:3.1p1-21.i386",
          "2.1AW:openssh-clients-0:3.1p1-21.ia64",
          "2.1AW:openssh-server-0:3.1p1-21.i386",
          "2.1AW:openssh-server-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.i386",
          "2.1ES:openssh-0:3.1p1-21.ia64",
          "2.1ES:openssh-0:3.1p1-21.src",
          "2.1ES:openssh-askpass-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1ES:openssh-clients-0:3.1p1-21.i386",
          "2.1ES:openssh-clients-0:3.1p1-21.ia64",
          "2.1ES:openssh-server-0:3.1p1-21.i386",
          "2.1ES:openssh-server-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.i386",
          "2.1WS:openssh-0:3.1p1-21.ia64",
          "2.1WS:openssh-0:3.1p1-21.src",
          "2.1WS:openssh-askpass-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
          "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
          "2.1WS:openssh-clients-0:3.1p1-21.i386",
          "2.1WS:openssh-clients-0:3.1p1-21.ia64",
          "2.1WS:openssh-server-0:3.1p1-21.i386",
          "2.1WS:openssh-server-0:3.1p1-21.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-5051"
        },
        {
          "category": "external",
          "summary": "RHBZ#208347",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=208347"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-5051",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-5051"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-5051",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5051"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-09-29T00:23:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "2.1AS:openssh-0:3.1p1-21.i386",
            "2.1AS:openssh-0:3.1p1-21.ia64",
            "2.1AS:openssh-0:3.1p1-21.src",
            "2.1AS:openssh-askpass-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AS:openssh-clients-0:3.1p1-21.i386",
            "2.1AS:openssh-clients-0:3.1p1-21.ia64",
            "2.1AS:openssh-server-0:3.1p1-21.i386",
            "2.1AS:openssh-server-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.i386",
            "2.1AW:openssh-0:3.1p1-21.ia64",
            "2.1AW:openssh-0:3.1p1-21.src",
            "2.1AW:openssh-askpass-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-0:3.1p1-21.ia64",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1AW:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1AW:openssh-clients-0:3.1p1-21.i386",
            "2.1AW:openssh-clients-0:3.1p1-21.ia64",
            "2.1AW:openssh-server-0:3.1p1-21.i386",
            "2.1AW:openssh-server-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.i386",
            "2.1ES:openssh-0:3.1p1-21.ia64",
            "2.1ES:openssh-0:3.1p1-21.src",
            "2.1ES:openssh-askpass-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-0:3.1p1-21.ia64",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1ES:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1ES:openssh-clients-0:3.1p1-21.i386",
            "2.1ES:openssh-clients-0:3.1p1-21.ia64",
            "2.1ES:openssh-server-0:3.1p1-21.i386",
            "2.1ES:openssh-server-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.i386",
            "2.1WS:openssh-0:3.1p1-21.ia64",
            "2.1WS:openssh-0:3.1p1-21.src",
            "2.1WS:openssh-askpass-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-0:3.1p1-21.ia64",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.i386",
            "2.1WS:openssh-askpass-gnome-0:3.1p1-21.ia64",
            "2.1WS:openssh-clients-0:3.1p1-21.i386",
            "2.1WS:openssh-clients-0:3.1p1-21.ia64",
            "2.1WS:openssh-server-0:3.1p1-21.i386",
            "2.1WS:openssh-server-0:3.1p1-21.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0698"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "unsafe GSSAPI signal handler"
    }
  ]
}

cve-2006-5051

Vulnerability from cvelistv5

Published

2006-09-27 23:00

Modified

2024-08-07 19:32

Severity ?

Summary

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

References

▼	URL	Tags
	http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc	vendor-advisory
	http://sourceforge.net/forum/forum.php?forum_id=681763
	http://secunia.com/advisories/22270	third-party-advisory
	http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf
	http://www.ubuntu.com/usn/usn-355-1	vendor-advisory
	http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html	mailing-list
	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387	vdb-entry, signature
	http://openssh.org/txt/release-4.4
	http://secunia.com/advisories/24805	third-party-advisory
	http://www.kb.cert.org/vuls/id/851340	third-party-advisory
	http://www.openbsd.org/errata.html#ssh	vendor-advisory
	http://secunia.com/advisories/22487	third-party-advisory
	http://www.us-cert.gov/cas/techalerts/TA07-072A.html	third-party-advisory
	http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf
	http://security.gentoo.org/glsa/glsa-200611-06.xml	vendor-advisory
	http://www.novell.com/linux/security/advisories/2006_62_openssh.html	vendor-advisory
	http://secunia.com/advisories/22362	third-party-advisory
	http://secunia.com/advisories/23680	third-party-advisory
	http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	vendor-advisory
	http://docs.info.apple.com/article.html?artnum=305214
	http://secunia.com/advisories/22352	third-party-advisory
	http://www.vupen.com/english/advisories/2006/4329	vdb-entry
	http://secunia.com/advisories/22236	third-party-advisory
	http://secunia.com/advisories/24799	third-party-advisory
	http://www.vupen.com/english/advisories/2006/4018	vdb-entry
	http://secunia.com/advisories/22495	third-party-advisory
	https://exchange.xforce.ibmcloud.com/vulnerabilities/29254	vdb-entry
	http://www.securityfocus.com/bid/20241	vdb-entry
	http://www.vupen.com/english/advisories/2007/1332	vdb-entry
	http://www.osvdb.org/29264	vdb-entry
	http://secunia.com/advisories/22823	third-party-advisory
	ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc	vendor-advisory
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566	vendor-advisory
	http://www.redhat.com/support/errata/RHSA-2006-0697.html	vendor-advisory
	http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html	vendor-advisory
	http://secunia.com/advisories/22183	third-party-advisory
	http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2	mailing-list
	http://www.vupen.com/english/advisories/2007/0930	vdb-entry
	http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html	mailing-list
	http://secunia.com/advisories/22926	third-party-advisory
	http://secunia.com/advisories/22173	third-party-advisory
	http://securitytracker.com/id?1016940	vdb-entry
	http://secunia.com/advisories/22208	third-party-advisory
	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
	http://secunia.com/advisories/22245	third-party-advisory
	ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	vendor-advisory
	http://secunia.com/advisories/22196	third-party-advisory
	http://www.debian.org/security/2006/dsa-1212	vendor-advisory
	http://www.redhat.com/support/errata/RHSA-2006-0698.html	vendor-advisory
	http://secunia.com/advisories/22158	third-party-advisory
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:179	vendor-advisory
	http://www.debian.org/security/2006/dsa-1189	vendor-advisory
	http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm
	http://secunia.com/advisories/24479	third-party-advisory
	http://www.openwall.com/lists/oss-security/2024/07/01/3	mailing-list
	http://www.openwall.com/lists/oss-security/2024/07/28/3	mailing-list
	https://www.openwall.com/lists/oss-security/2024/07/28/3

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:32:23.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FreeBSD-SA-06:22",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
          },
          {
            "name": "22270",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22270"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf"
          },
          {
            "name": "USN-355-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-355-1"
          },
          {
            "name": "[freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.openssh",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11387",
            "tags": [
              "vdb-entry",
              "signature",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssh.org/txt/release-4.4"
          },
          {
            "name": "24805",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24805"
          },
          {
            "name": "VU#851340",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/851340"
          },
          {
            "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/errata.html#ssh"
          },
          {
            "name": "22487",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22487"
          },
          {
            "name": "TA07-072A",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf"
          },
          {
            "name": "GLSA-200611-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
          },
          {
            "name": "SUSE-SA:2006:062",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
          },
          {
            "name": "22362",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22362"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "name": "22352",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22352"
          },
          {
            "name": "ADV-2006-4329",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4329"
          },
          {
            "name": "22236",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22236"
          },
          {
            "name": "24799",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24799"
          },
          {
            "name": "ADV-2006-4018",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4018"
          },
          {
            "name": "22495",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22495"
          },
          {
            "name": "openssh-signal-handler-race-condition(29254)",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254"
          },
          {
            "name": "20241",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20241"
          },
          {
            "name": "ADV-2007-1332",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1332"
          },
          {
            "name": "29264",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29264"
          },
          {
            "name": "22823",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22823"
          },
          {
            "name": "FreeBSD-SA-06:22.openssh",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
          },
          {
            "name": "SSA:2006-272-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
          },
          {
            "name": "RHSA-2006:0697",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
          },
          {
            "name": "OpenPKG-SA-2006.022",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
          },
          {
            "name": "22183",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22183"
          },
          {
            "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
          },
          {
            "name": "ADV-2007-0930",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
          },
          {
            "name": "22926",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22926"
          },
          {
            "name": "22173",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22173"
          },
          {
            "name": "1016940",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016940"
          },
          {
            "name": "22208",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22208"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "22245",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22245"
          },
          {
            "name": "20061001-01-P",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
          },
          {
            "name": "22196",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22196"
          },
          {
            "name": "DSA-1212",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1212"
          },
          {
            "name": "RHSA-2006:0698",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
          },
          {
            "name": "22158",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22158"
          },
          {
            "name": "MDKSA-2006:179",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
          },
          {
            "name": "DSA-1189",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1189"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
          },
          {
            "name": "24479",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24479"
          },
          {
            "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
          },
          {
            "name": "[oss-security] 20240728 Re: Announce: OpenSSH 9.8 released",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/28/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2024/07/28/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-09-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-29T00:34:17.921429",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FreeBSD-SA-06:22",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
        },
        {
          "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
        },
        {
          "name": "22270",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22270"
        },
        {
          "url": "http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf"
        },
        {
          "name": "USN-355-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/usn-355-1"
        },
        {
          "name": "[freebsd-security] 20061002 FreeBSD Security Advisory FreeBSD-SA-06:22.openssh",
          "tags": [
            "mailing-list"
          ],
          "url": "http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html"
        },
        {
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11387",
          "tags": [
            "vdb-entry",
            "signature"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387"
        },
        {
          "url": "http://openssh.org/txt/release-4.4"
        },
        {
          "name": "24805",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24805"
        },
        {
          "name": "VU#851340",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://www.kb.cert.org/vuls/id/851340"
        },
        {
          "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.openbsd.org/errata.html#ssh"
        },
        {
          "name": "22487",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22487"
        },
        {
          "name": "TA07-072A",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "url": "http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf"
        },
        {
          "name": "GLSA-200611-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
        },
        {
          "name": "SUSE-SA:2006:062",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
        },
        {
          "name": "22362",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22362"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "APPLE-SA-2007-03-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "name": "22352",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22352"
        },
        {
          "name": "ADV-2006-4329",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4329"
        },
        {
          "name": "22236",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22236"
        },
        {
          "name": "24799",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24799"
        },
        {
          "name": "ADV-2006-4018",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4018"
        },
        {
          "name": "22495",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22495"
        },
        {
          "name": "openssh-signal-handler-race-condition(29254)",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29254"
        },
        {
          "name": "20241",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/20241"
        },
        {
          "name": "ADV-2007-1332",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1332"
        },
        {
          "name": "29264",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.osvdb.org/29264"
        },
        {
          "name": "22823",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22823"
        },
        {
          "name": "FreeBSD-SA-06:22.openssh",
          "tags": [
            "vendor-advisory"
          ],
          "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
        },
        {
          "name": "SSA:2006-272-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
        },
        {
          "name": "RHSA-2006:0697",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
        },
        {
          "name": "OpenPKG-SA-2006.022",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
        },
        {
          "name": "22183",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22183"
        },
        {
          "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
          "tags": [
            "mailing-list"
          ],
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
        },
        {
          "name": "ADV-2007-0930",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
        },
        {
          "name": "22926",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22926"
        },
        {
          "name": "22173",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22173"
        },
        {
          "name": "1016940",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://securitytracker.com/id?1016940"
        },
        {
          "name": "22208",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22208"
        },
        {
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "name": "22245",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22245"
        },
        {
          "name": "20061001-01-P",
          "tags": [
            "vendor-advisory"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
        },
        {
          "name": "22196",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22196"
        },
        {
          "name": "DSA-1212",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1212"
        },
        {
          "name": "RHSA-2006:0698",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
        },
        {
          "name": "22158",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/22158"
        },
        {
          "name": "MDKSA-2006:179",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
        },
        {
          "name": "DSA-1189",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1189"
        },
        {
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
        },
        {
          "name": "24479",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/24479"
        },
        {
          "name": "[oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH\u0027s server, on glibc-based Linux systems",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/07/01/3"
        },
        {
          "name": "[oss-security] 20240728 Re: Announce: OpenSSH 9.8 released",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/07/28/3"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2024/07/28/3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-5051",
    "datePublished": "2006-09-27T23:00:00",
    "dateReserved": "2006-09-27T00:00:00",
    "dateUpdated": "2024-08-07T19:32:23.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-0225

Vulnerability from cvelistv5

Published

2006-01-25 11:00

Modified

2024-08-07 16:25

Severity ?

Summary

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/16369	vdb-entry, x_refsource_BID
	http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/25936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18798	third-party-advisory, x_refsource_SECUNIA
	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html	x_refsource_CONFIRM
	http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688	x_refsource_CONFIRM
	http://secunia.com/advisories/23340	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0298.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/18970	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21492	third-party-advisory, x_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA07-072A.html	third-party-advisory, x_refsource_CERT
	http://www.trustix.org/errata/2006/0004	vendor-advisory, x_refsource_TRUSTIX
	http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/19159	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18650	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18736	third-party-advisory, x_refsource_SECUNIA
	http://www.osvdb.org/22692	vdb-entry, x_refsource_OSVDB
	http://www.vupen.com/english/advisories/2007/2120	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/23680	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/18579	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18969	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20723	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/24305	vdb-entry, x_refsource_XF
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:034	vendor-advisory, x_refsource_MANDRIVA
	http://securityreason.com/securityalert/462	third-party-advisory, x_refsource_SREASON
	http://docs.info.apple.com/article.html?artnum=305214	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/4869	vdb-entry, x_refsource_VUPEN
	http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html	vendor-advisory, x_refsource_OPENPKG
	http://www.securityfocus.com/archive/1/425397/100/0/threaded	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2006-0044.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/21262	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25607	third-party-advisory, x_refsource_SECUNIA
	http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112	vendor-advisory, x_refsource_HP
	http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability	x_refsource_CONFIRM
	http://www.novell.com/linux/security/advisories/2006_08_openssh.html	vendor-advisory, x_refsource_SUSE
	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/2490	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2006/0306	vdb-entry, x_refsource_VUPEN
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802	vendor-advisory, x_refsource_SLACKWARE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/21129	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1015540	vdb-entry, x_refsource_SECTRACK
	http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/21724	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/23241	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch	vendor-advisory, x_refsource_OPENBSD
	http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2007/0930	vdb-entry, x_refsource_VUPEN
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html	x_refsource_CONFIRM
	http://secunia.com/advisories/18850	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22196	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2006-0698.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/18595	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18964	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-255-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962	vdb-entry, signature, x_refsource_OVAL
	ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/18910	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24479	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:25:34.046Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "16369",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16369"
          },
          {
            "name": "HPSBUX02178",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
          },
          {
            "name": "25936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25936"
          },
          {
            "name": "18798",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18798"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688"
          },
          {
            "name": "23340",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23340"
          },
          {
            "name": "RHSA-2006:0298",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html"
          },
          {
            "name": "18970",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18970"
          },
          {
            "name": "21492",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21492"
          },
          {
            "name": "TA07-072A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "name": "2006-0004",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0004"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm"
          },
          {
            "name": "19159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19159"
          },
          {
            "name": "18650",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18650"
          },
          {
            "name": "18736",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18736"
          },
          {
            "name": "22692",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/22692"
          },
          {
            "name": "ADV-2007-2120",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2120"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "name": "18579",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18579"
          },
          {
            "name": "18969",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18969"
          },
          {
            "name": "20723",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20723"
          },
          {
            "name": "openssh-scp-command-execution(24305)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305"
          },
          {
            "name": "MDKSA-2006:034",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034"
          },
          {
            "name": "462",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/462"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm"
          },
          {
            "name": "ADV-2006-4869",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4869"
          },
          {
            "name": "OpenPKG-SA-2006.003",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html"
          },
          {
            "name": "FLSA-2006:168935",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
          },
          {
            "name": "RHSA-2006:0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0044.html"
          },
          {
            "name": "21262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21262"
          },
          {
            "name": "25607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25607"
          },
          {
            "name": "SSRT061267",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability"
          },
          {
            "name": "SUSE-SA:2006:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_08_openssh.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=2751"
          },
          {
            "name": "ADV-2006-2490",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2490"
          },
          {
            "name": "ADV-2006-0306",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0306"
          },
          {
            "name": "SSA:2006-045-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.425802"
          },
          {
            "name": "oval:org.mitre.oval:def:1138",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138"
          },
          {
            "name": "21129",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21129"
          },
          {
            "name": "1015540",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015540"
          },
          {
            "name": "FEDORA-2006-056",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html"
          },
          {
            "name": "21724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21724"
          },
          {
            "name": "GLSA-200602-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml"
          },
          {
            "name": "23241",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23241"
          },
          {
            "name": "20060212 [3.8] 005: SECURITY FIX: February 12, 2006",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm"
          },
          {
            "name": "ADV-2007-0930",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026"
          },
          {
            "name": "102961",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "18850",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18850"
          },
          {
            "name": "22196",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22196"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm"
          },
          {
            "name": "RHSA-2006:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
          },
          {
            "name": "18595",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18595"
          },
          {
            "name": "18964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18964"
          },
          {
            "name": "USN-255-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-255-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9962",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962"
          },
          {
            "name": "20060703-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"
          },
          {
            "name": "18910",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18910"
          },
          {
            "name": "24479",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24479"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "16369",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16369"
        },
        {
          "name": "HPSBUX02178",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
        },
        {
          "name": "25936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25936"
        },
        {
          "name": "18798",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18798"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688"
        },
        {
          "name": "23340",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23340"
        },
        {
          "name": "RHSA-2006:0298",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html"
        },
        {
          "name": "18970",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18970"
        },
        {
          "name": "21492",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21492"
        },
        {
          "name": "TA07-072A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "name": "2006-0004",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0004"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm"
        },
        {
          "name": "19159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19159"
        },
        {
          "name": "18650",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18650"
        },
        {
          "name": "18736",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18736"
        },
        {
          "name": "22692",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/22692"
        },
        {
          "name": "ADV-2007-2120",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2120"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "APPLE-SA-2007-03-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "name": "18579",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18579"
        },
        {
          "name": "18969",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18969"
        },
        {
          "name": "20723",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20723"
        },
        {
          "name": "openssh-scp-command-execution(24305)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305"
        },
        {
          "name": "MDKSA-2006:034",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034"
        },
        {
          "name": "462",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/462"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm"
        },
        {
          "name": "ADV-2006-4869",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4869"
        },
        {
          "name": "OpenPKG-SA-2006.003",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html"
        },
        {
          "name": "FLSA-2006:168935",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded"
        },
        {
          "name": "RHSA-2006:0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0044.html"
        },
        {
          "name": "21262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21262"
        },
        {
          "name": "25607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25607"
        },
        {
          "name": "SSRT061267",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability"
        },
        {
          "name": "SUSE-SA:2006:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_08_openssh.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=2751"
        },
        {
          "name": "ADV-2006-2490",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2490"
        },
        {
          "name": "ADV-2006-0306",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0306"
        },
        {
          "name": "SSA:2006-045-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.425802"
        },
        {
          "name": "oval:org.mitre.oval:def:1138",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138"
        },
        {
          "name": "21129",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21129"
        },
        {
          "name": "1015540",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015540"
        },
        {
          "name": "FEDORA-2006-056",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html"
        },
        {
          "name": "21724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21724"
        },
        {
          "name": "GLSA-200602-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml"
        },
        {
          "name": "23241",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23241"
        },
        {
          "name": "20060212 [3.8] 005: SECURITY FIX: February 12, 2006",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENBSD"
          ],
          "url": "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm"
        },
        {
          "name": "ADV-2007-0930",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026"
        },
        {
          "name": "102961",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "name": "18850",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18850"
        },
        {
          "name": "22196",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22196"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm"
        },
        {
          "name": "RHSA-2006:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
        },
        {
          "name": "18595",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18595"
        },
        {
          "name": "18964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18964"
        },
        {
          "name": "USN-255-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-255-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9962",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962"
        },
        {
          "name": "20060703-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"
        },
        {
          "name": "18910",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18910"
        },
        {
          "name": "24479",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24479"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-0225",
    "datePublished": "2006-01-25T11:00:00",
    "dateReserved": "2006-01-17T00:00:00",
    "dateUpdated": "2024-08-07T16:25:34.046Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-4924

Vulnerability from cvelistv5

Published

2006-09-27 01:00

Modified

2024-08-07 19:32

Severity ?

Summary

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

References

▼	URL	Tags
	http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc	vendor-advisory, x_refsource_FREEBSD
	http://sourceforge.net/forum/forum.php?forum_id=681763	x_refsource_CONFIRM
	http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability	x_refsource_CONFIRM
	http://secunia.com/advisories/22270	third-party-advisory, x_refsource_SECUNIA
	http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/23038	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-355-1	vendor-advisory, x_refsource_UBUNTU
	http://www.trustix.org/errata/2006/0054	vendor-advisory, x_refsource_TRUSTIX
	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/4401	vdb-entry, x_refsource_VUPEN
	http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/0740	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/22116	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21923	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24805	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/23340	third-party-advisory, x_refsource_SECUNIA
	http://www.openbsd.org/errata.html#ssh	vendor-advisory, x_refsource_OPENBSD
	http://www.novell.com/linux/security/advisories/2006_24_sr.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/22487	third-party-advisory, x_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA07-072A.html	third-party-advisory, x_refsource_CERT
	http://security.gentoo.org/glsa/glsa-200611-06.xml	vendor-advisory, x_refsource_GENTOO
	http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm	x_refsource_CONFIRM
	http://bugs.gentoo.org/show_bug.cgi?id=148228	x_refsource_CONFIRM
	http://secunia.com/advisories/22164	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1	vendor-advisory, x_refsource_SUNALERT
	http://www.novell.com/linux/security/advisories/2006_62_openssh.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/22362	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/23680	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/34274	third-party-advisory, x_refsource_SECUNIA
	http://www.kb.cert.org/vuls/id/787448	third-party-advisory, x_refsource_CERT-VN
	http://docs.info.apple.com/article.html?artnum=305214	x_refsource_CONFIRM
	http://securitytracker.com/id?1016931	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2006/4869	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/22298	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22352	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22236	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/24799	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955	x_refsource_MISC
	http://secunia.com/advisories/22091	third-party-advisory, x_refsource_SECUNIA
	http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/22495	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/1332	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/20216	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/447153/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://security.gentoo.org/glsa/glsa-200609-17.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/22823	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc	vendor-advisory, x_refsource_FREEBSD
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566	vendor-advisory, x_refsource_SLACKWARE
	http://www.redhat.com/support/errata/RHSA-2006-0697.html	vendor-advisory, x_refsource_REDHAT
	https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/3777	vdb-entry, x_refsource_VUPEN
	http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/22183	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/29158	vdb-entry, x_refsource_XF
	http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/23241	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2119	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2007/0930	vdb-entry, x_refsource_VUPEN
	http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/22926	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29371	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22208	third-party-advisory, x_refsource_SECUNIA
	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html	x_refsource_CONFIRM
	http://secunia.com/advisories/22245	third-party-advisory, x_refsource_SECUNIA
	ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	vendor-advisory, x_refsource_SGI
	https://issues.rpath.com/browse/RPL-661	x_refsource_CONFIRM
	http://secunia.com/advisories/22196	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1212	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2006-0698.html	vendor-advisory, x_refsource_REDHAT
	http://www.osvdb.org/29152	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/25608	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22158	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:179	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2006/dsa-1189	vendor-advisory, x_refsource_DEBIAN
	http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm	x_refsource_CONFIRM
	ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt	vendor-advisory, x_refsource_SCO
	http://secunia.com/advisories/24479	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:32:22.366Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FreeBSD-SA-06:22",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability"
          },
          {
            "name": "22270",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22270"
          },
          {
            "name": "HPSBUX02178",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
          },
          {
            "name": "23038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23038"
          },
          {
            "name": "USN-355-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-355-1"
          },
          {
            "name": "2006-0054",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0054"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "ADV-2006-4401",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4401"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=461863\u0026group_id=69227"
          },
          {
            "name": "ADV-2009-0740",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0740"
          },
          {
            "name": "22116",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22116"
          },
          {
            "name": "21923",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21923"
          },
          {
            "name": "24805",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24805"
          },
          {
            "name": "23340",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23340"
          },
          {
            "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENBSD",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/errata.html#ssh"
          },
          {
            "name": "SUSE-SR:2006:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
          },
          {
            "name": "22487",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22487"
          },
          {
            "name": "TA07-072A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "name": "GLSA-200611-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=148228"
          },
          {
            "name": "22164",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22164"
          },
          {
            "name": "102962",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1"
          },
          {
            "name": "SUSE-SA:2006:062",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
          },
          {
            "name": "22362",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22362"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "name": "34274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34274"
          },
          {
            "name": "VU#787448",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/787448"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "name": "1016931",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016931"
          },
          {
            "name": "ADV-2006-4869",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4869"
          },
          {
            "name": "22298",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22298"
          },
          {
            "name": "22352",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22352"
          },
          {
            "name": "22236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22236"
          },
          {
            "name": "oval:org.mitre.oval:def:1193",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193"
          },
          {
            "name": "24799",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24799"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955"
          },
          {
            "name": "22091",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22091"
          },
          {
            "name": "SSRT061267",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
          },
          {
            "name": "22495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22495"
          },
          {
            "name": "ADV-2007-1332",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1332"
          },
          {
            "name": "20216",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20216"
          },
          {
            "name": "20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/447153/100/0/threaded"
          },
          {
            "name": "GLSA-200609-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200609-17.xml"
          },
          {
            "name": "22823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22823"
          },
          {
            "name": "FreeBSD-SA-06:22.openssh",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
          },
          {
            "name": "SSA:2006-272-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
          },
          {
            "name": "RHSA-2006:0697",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg"
          },
          {
            "name": "ADV-2006-3777",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3777"
          },
          {
            "name": "OpenPKG-SA-2006.022",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
          },
          {
            "name": "22183",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22183"
          },
          {
            "name": "openssh-block-dos(29158)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29158"
          },
          {
            "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
          },
          {
            "name": "23241",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23241"
          },
          {
            "name": "ADV-2007-2119",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2119"
          },
          {
            "name": "ADV-2007-0930",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
          },
          {
            "name": "22926",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22926"
          },
          {
            "name": "29371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29371"
          },
          {
            "name": "22208",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22208"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "22245",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22245"
          },
          {
            "name": "20061001-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-661"
          },
          {
            "name": "22196",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22196"
          },
          {
            "name": "DSA-1212",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1212"
          },
          {
            "name": "oval:org.mitre.oval:def:10462",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462"
          },
          {
            "name": "RHSA-2006:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
          },
          {
            "name": "29152",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/29152"
          },
          {
            "name": "25608",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25608"
          },
          {
            "name": "22158",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22158"
          },
          {
            "name": "MDKSA-2006:179",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
          },
          {
            "name": "DSA-1189",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1189"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
          },
          {
            "name": "SCOSA-2008.2",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt"
          },
          {
            "name": "24479",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24479"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-09-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FreeBSD-SA-06:22",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability"
        },
        {
          "name": "22270",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22270"
        },
        {
          "name": "HPSBUX02178",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
        },
        {
          "name": "23038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23038"
        },
        {
          "name": "USN-355-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-355-1"
        },
        {
          "name": "2006-0054",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0054"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "name": "ADV-2006-4401",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4401"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=461863\u0026group_id=69227"
        },
        {
          "name": "ADV-2009-0740",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0740"
        },
        {
          "name": "22116",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22116"
        },
        {
          "name": "21923",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21923"
        },
        {
          "name": "24805",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24805"
        },
        {
          "name": "23340",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23340"
        },
        {
          "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENBSD"
          ],
          "url": "http://www.openbsd.org/errata.html#ssh"
        },
        {
          "name": "SUSE-SR:2006:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
        },
        {
          "name": "22487",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22487"
        },
        {
          "name": "TA07-072A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
        },
        {
          "name": "GLSA-200611-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=148228"
        },
        {
          "name": "22164",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22164"
        },
        {
          "name": "102962",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1"
        },
        {
          "name": "SUSE-SA:2006:062",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
        },
        {
          "name": "22362",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22362"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "APPLE-SA-2007-03-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
        },
        {
          "name": "34274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34274"
        },
        {
          "name": "VU#787448",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/787448"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=305214"
        },
        {
          "name": "1016931",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016931"
        },
        {
          "name": "ADV-2006-4869",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4869"
        },
        {
          "name": "22298",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22298"
        },
        {
          "name": "22352",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22352"
        },
        {
          "name": "22236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22236"
        },
        {
          "name": "oval:org.mitre.oval:def:1193",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193"
        },
        {
          "name": "24799",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24799"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955"
        },
        {
          "name": "22091",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22091"
        },
        {
          "name": "SSRT061267",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
        },
        {
          "name": "22495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22495"
        },
        {
          "name": "ADV-2007-1332",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1332"
        },
        {
          "name": "20216",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20216"
        },
        {
          "name": "20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/447153/100/0/threaded"
        },
        {
          "name": "GLSA-200609-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200609-17.xml"
        },
        {
          "name": "22823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22823"
        },
        {
          "name": "FreeBSD-SA-06:22.openssh",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
        },
        {
          "name": "SSA:2006-272-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
        },
        {
          "name": "RHSA-2006:0697",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg"
        },
        {
          "name": "ADV-2006-3777",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3777"
        },
        {
          "name": "OpenPKG-SA-2006.022",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
        },
        {
          "name": "22183",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22183"
        },
        {
          "name": "openssh-block-dos(29158)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29158"
        },
        {
          "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
        },
        {
          "name": "23241",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23241"
        },
        {
          "name": "ADV-2007-2119",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2119"
        },
        {
          "name": "ADV-2007-0930",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0930"
        },
        {
          "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
        },
        {
          "name": "22926",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22926"
        },
        {
          "name": "29371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29371"
        },
        {
          "name": "22208",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22208"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "name": "22245",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22245"
        },
        {
          "name": "20061001-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-661"
        },
        {
          "name": "22196",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22196"
        },
        {
          "name": "DSA-1212",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1212"
        },
        {
          "name": "oval:org.mitre.oval:def:10462",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462"
        },
        {
          "name": "RHSA-2006:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
        },
        {
          "name": "29152",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/29152"
        },
        {
          "name": "25608",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25608"
        },
        {
          "name": "22158",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22158"
        },
        {
          "name": "MDKSA-2006:179",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
        },
        {
          "name": "DSA-1189",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1189"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
        },
        {
          "name": "SCOSA-2008.2",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt"
        },
        {
          "name": "24479",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24479"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-4924",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FreeBSD-SA-06:22",
              "refsource": "FREEBSD",
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc"
            },
            {
              "name": "http://sourceforge.net/forum/forum.php?forum_id=681763",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/forum/forum.php?forum_id=681763"
            },
            {
              "name": "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability",
              "refsource": "CONFIRM",
              "url": "http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability"
            },
            {
              "name": "22270",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22270"
            },
            {
              "name": "HPSBUX02178",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
            },
            {
              "name": "23038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23038"
            },
            {
              "name": "USN-355-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-355-1"
            },
            {
              "name": "2006-0054",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0054"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
            },
            {
              "name": "ADV-2006-4401",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4401"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=461863\u0026group_id=69227",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=461863\u0026group_id=69227"
            },
            {
              "name": "ADV-2009-0740",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0740"
            },
            {
              "name": "22116",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22116"
            },
            {
              "name": "21923",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21923"
            },
            {
              "name": "24805",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24805"
            },
            {
              "name": "23340",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23340"
            },
            {
              "name": "[2.9] 015: SECURITY FIX: October 12, 2006",
              "refsource": "OPENBSD",
              "url": "http://www.openbsd.org/errata.html#ssh"
            },
            {
              "name": "SUSE-SR:2006:024",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
            },
            {
              "name": "22487",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22487"
            },
            {
              "name": "TA07-072A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
            },
            {
              "name": "GLSA-200611-06",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200611-06.xml"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=148228",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=148228"
            },
            {
              "name": "22164",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22164"
            },
            {
              "name": "102962",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1"
            },
            {
              "name": "SUSE-SA:2006:062",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_62_openssh.html"
            },
            {
              "name": "22362",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22362"
            },
            {
              "name": "23680",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23680"
            },
            {
              "name": "APPLE-SA-2007-03-13",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
            },
            {
              "name": "34274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34274"
            },
            {
              "name": "VU#787448",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/787448"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=305214",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=305214"
            },
            {
              "name": "1016931",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016931"
            },
            {
              "name": "ADV-2006-4869",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4869"
            },
            {
              "name": "22298",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22298"
            },
            {
              "name": "22352",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22352"
            },
            {
              "name": "22236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22236"
            },
            {
              "name": "oval:org.mitre.oval:def:1193",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193"
            },
            {
              "name": "24799",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24799"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955"
            },
            {
              "name": "22091",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22091"
            },
            {
              "name": "SSRT061267",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112"
            },
            {
              "name": "22495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22495"
            },
            {
              "name": "ADV-2007-1332",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1332"
            },
            {
              "name": "20216",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20216"
            },
            {
              "name": "20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/447153/100/0/threaded"
            },
            {
              "name": "GLSA-200609-17",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200609-17.xml"
            },
            {
              "name": "22823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22823"
            },
            {
              "name": "FreeBSD-SA-06:22.openssh",
              "refsource": "FREEBSD",
              "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc"
            },
            {
              "name": "SSA:2006-272-02",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.592566"
            },
            {
              "name": "RHSA-2006:0697",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0697.html"
            },
            {
              "name": "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg",
              "refsource": "CONFIRM",
              "url": "https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg"
            },
            {
              "name": "ADV-2006-3777",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3777"
            },
            {
              "name": "OpenPKG-SA-2006.022",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html"
            },
            {
              "name": "22183",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22183"
            },
            {
              "name": "openssh-block-dos(29158)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29158"
            },
            {
              "name": "[openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=openssh-unix-dev\u0026m=115939141729160\u0026w=2"
            },
            {
              "name": "23241",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23241"
            },
            {
              "name": "ADV-2007-2119",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2119"
            },
            {
              "name": "ADV-2007-0930",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0930"
            },
            {
              "name": "[security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability",
              "refsource": "MLIST",
              "url": "http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html"
            },
            {
              "name": "22926",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22926"
            },
            {
              "name": "29371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29371"
            },
            {
              "name": "22208",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22208"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
            },
            {
              "name": "22245",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22245"
            },
            {
              "name": "20061001-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-661",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-661"
            },
            {
              "name": "22196",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22196"
            },
            {
              "name": "DSA-1212",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1212"
            },
            {
              "name": "oval:org.mitre.oval:def:10462",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462"
            },
            {
              "name": "RHSA-2006:0698",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
            },
            {
              "name": "29152",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/29152"
            },
            {
              "name": "25608",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25608"
            },
            {
              "name": "22158",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22158"
            },
            {
              "name": "MDKSA-2006:179",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:179"
            },
            {
              "name": "DSA-1189",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1189"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm"
            },
            {
              "name": "SCOSA-2008.2",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt"
            },
            {
              "name": "24479",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24479"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-4924",
    "datePublished": "2006-09-27T01:00:00",
    "dateReserved": "2006-09-21T00:00:00",
    "dateUpdated": "2024-08-07T19:32:22.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2003-0386

Vulnerability from cvelistv5

Published

2003-06-10 04:00

Modified

2024-08-08 01:50

Severity ?

Summary

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

References

▼	URL	Tags
	http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2006-0298.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/23680	third-party-advisory, x_refsource_SECUNIA
	http://www.kb.cert.org/vuls/id/978316	third-party-advisory, x_refsource_CERT-VN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9894	vdb-entry, signature, x_refsource_OVAL
	http://lists.apple.com/mhonarc/security-announce/msg00038.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/7831	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/21262	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21129	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/324016/2003-06-03/2003-06-09/0	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/21724	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm	x_refsource_CONFIRM
	http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html	x_refsource_CONFIRM
	http://secunia.com/advisories/22196	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0698.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc	vendor-advisory, x_refsource_SGI

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:50:47.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
          },
          {
            "name": "RHSA-2006:0298",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html"
          },
          {
            "name": "23680",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23680"
          },
          {
            "name": "VU#978316",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/978316"
          },
          {
            "name": "oval:org.mitre.oval:def:9894",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9894"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/mhonarc/security-announce/msg00038.html"
          },
          {
            "name": "7831",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/7831"
          },
          {
            "name": "21262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21262"
          },
          {
            "name": "21129",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21129"
          },
          {
            "name": "20030605 OpenSSH remote clent address restriction circumvention",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/324016/2003-06-03/2003-06-09/0"
          },
          {
            "name": "21724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21724"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
          },
          {
            "name": "22196",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22196"
          },
          {
            "name": "RHSA-2006:0698",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
          },
          {
            "name": "20060703-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2003-06-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass \"from=\" and \"user@host\" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
        },
        {
          "name": "RHSA-2006:0298",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html"
        },
        {
          "name": "23680",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23680"
        },
        {
          "name": "VU#978316",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/978316"
        },
        {
          "name": "oval:org.mitre.oval:def:9894",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9894"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://lists.apple.com/mhonarc/security-announce/msg00038.html"
        },
        {
          "name": "7831",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/7831"
        },
        {
          "name": "21262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21262"
        },
        {
          "name": "21129",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21129"
        },
        {
          "name": "20030605 OpenSSH remote clent address restriction circumvention",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/324016/2003-06-03/2003-06-09/0"
        },
        {
          "name": "21724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21724"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
        },
        {
          "name": "22196",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22196"
        },
        {
          "name": "RHSA-2006:0698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
        },
        {
          "name": "20060703-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-0386",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass \"from=\" and \"user@host\" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
            },
            {
              "name": "RHSA-2006:0298",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html"
            },
            {
              "name": "23680",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23680"
            },
            {
              "name": "VU#978316",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/978316"
            },
            {
              "name": "oval:org.mitre.oval:def:9894",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9894"
            },
            {
              "name": "http://lists.apple.com/mhonarc/security-announce/msg00038.html",
              "refsource": "CONFIRM",
              "url": "http://lists.apple.com/mhonarc/security-announce/msg00038.html"
            },
            {
              "name": "7831",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/7831"
            },
            {
              "name": "21262",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21262"
            },
            {
              "name": "21129",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21129"
            },
            {
              "name": "20030605 OpenSSH remote clent address restriction circumvention",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/324016/2003-06-03/2003-06-09/0"
            },
            {
              "name": "21724",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21724"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
            },
            {
              "name": "22196",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22196"
            },
            {
              "name": "RHSA-2006:0698",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html"
            },
            {
              "name": "20060703-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2003-0386",
    "datePublished": "2003-06-10T04:00:00",
    "dateReserved": "2003-06-09T00:00:00",
    "dateUpdated": "2024-08-08T01:50:47.997Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2006_0698

Vulnerability from csaf_redhat

cve-2006-5051

Vulnerability from cvelistv5

cve-2006-0225

Vulnerability from cvelistv5

cve-2006-4924

Vulnerability from cvelistv5

cve-2003-0386

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature