CVE-2006-5052

Published: Sep 27, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Affected (56)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 1.2.1
Openbsd Openssh	Version 1.2.27
Openbsd Openssh	Version 1.2.2
Openbsd Openssh	Version 1.2.3
Openbsd Openssh	Version 1.2
Openbsd Openssh	Version 2.1.1
Openbsd Openssh	Version 2.1
Openbsd Openssh	Version 2.2
Openbsd Openssh	Version 2.3
Openbsd Openssh	Version 2.5.1
Openbsd Openssh	Version 2.5.2
Openbsd Openssh	Version 2.5
Openbsd Openssh	Version 2.9.9
Openbsd Openssh	Version 2.9.9p2
Openbsd Openssh	Version 2.9
Openbsd Openssh	Version 2.9p1
Openbsd Openssh	Version 2.9p2
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1
Openbsd Openssh	Version 3.4
Openbsd Openssh	Version 3.4p1
Openbsd Openssh	Version 3.5
Openbsd Openssh	Version 3.5p1
Openbsd Openssh	Version 3.6.1
Openbsd Openssh	Version 3.6.1p1
Openbsd Openssh	Version 3.6.1p2
Openbsd Openssh	Version 3.6
Openbsd Openssh	Version 3.7.1
Openbsd Openssh	Version 3.7.1p1
Openbsd Openssh	Version 3.7.1p2
Openbsd Openssh	Version 3.7
Openbsd Openssh	Version 3.8.1
Openbsd Openssh	Version 3.8.1p1
Openbsd Openssh	Version 3.8
Openbsd Openssh	Version 3.9.1
Openbsd Openssh	Version 3.9.1p1
Openbsd Openssh	Version 3.9
Openbsd Openssh	Version 4.0
Openbsd Openssh	Version 4.0p1
Openbsd Openssh	Version 4.1p1
Openbsd Openssh	Version 4.2
Openbsd Openssh	Version 4.2p1
Openbsd Openssh	Version 4.3
Openbsd Openssh	Version 4.3p1

References (54)

http://docs.info.apple.com/article.html?artnum=305214

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: secalert@redhat.com

http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2

Source: secalert@redhat.com

http://openssh.org/txt/release-4.4

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0697.html

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/22158

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22173

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22495

Source: secalert@redhat.com

http://secunia.com/advisories/22823

Source: secalert@redhat.com

http://secunia.com/advisories/24479

Source: secalert@redhat.com

http://secunia.com/advisories/27588

Source: secalert@redhat.com

http://secunia.com/advisories/28320

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200611-06.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016939

Source: secalert@redhat.com

Patch

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566

Source: secalert@redhat.com

Patch

http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_62_openssh.html

Source: secalert@redhat.com

http://www.osvdb.org/29266

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0540.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0703.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/447861/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20245

Source: secalert@redhat.com

Patch

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2007/0930

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/29255

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-681

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305214