Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openssh | Jul 30, 2024 | Nov 8, 2006 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 4.5 | Dec 5, 2012 | Nov 8, 2006 |
| Suse | — | Upgrade bind-libs-64bitUpgrade bind-devel-64bitUpgrade yast2-runlevelUpgrade udevUpgrade readlineUpgrade yast2-networkUpgrade binutils-x86Upgrade openldap2-client-x86Upgrade ldapcpplibUpgrade yast2-storage-develUpgrade yast2-samba-clientUpgrade yast2-firewallUpgrade scpm-develUpgrade rpmUpgrade libattr-64bitUpgrade pwdutilsUpgrade grepUpgrade yast2-online-updateUpgrade terminfoUpgrade findutils-locateUpgrade krb5-docUpgrade bind-utilsUpgrade dbus-1-32bitUpgrade readline-devel-32bitUpgrade popt-x86Upgrade pam-64bitUpgrade rpm-pythonUpgrade cronUpgrade sysfsutils-x86Upgrade xfsprogs-develUpgrade nfs-utilsUpgrade update-desktop-filesUpgrade openssh-askpass-gnomeUpgrade yast2-transferUpgrade bind-develUpgrade yast2-sysconfigUpgrade krb5-serverUpgrade scpmUpgrade krb5-apps-clientsUpgrade ncurses-devel-32bitUpgrade dbus-1-x11Upgrade dosfstoolsUpgrade rugUpgrade klogdUpgrade findutilsUpgrade yast2-repairUpgrade hal-64bitUpgrade binutils-64bitUpgrade insservUpgrade binutilsUpgrade e2fsprogs-devel-32bitUpgrade dbus-1-qt3Upgrade libcom_err-64bitUpgrade parted-x86Upgrade dbus-1-glib-64bitUpgrade dbus-1-pythonUpgrade rpm-develUpgrade readline-64bitUpgrade dmraidUpgrade e2fsprogs-64bitUpgrade mkinitrdUpgrade reiserfsUpgrade ldapcpplib-develUpgrade yast2-storageUpgrade sudoUpgrade openldap2-devel-32bitUpgrade pciutilsUpgrade popt-64bitUpgrade yast2-coreUpgrade dbus-1-qt3-develUpgrade mailxUpgrade ncurses-devel-64bitUpgrade yast2-xmlUpgrade yast2-perl-bindingsUpgrade desktop-translationsUpgrade yast2-irdaUpgrade bind-chrootenvUpgrade liby2util-develUpgrade libcom_err-32bitUpgrade syslinuxUpgrade hal-x86Upgrade libacl-develUpgrade zypperUpgrade e2fsprogsUpgrade yast2-inetdUpgrade sysconfigUpgrade libacl-x86Upgrade partedUpgrade libcom_errUpgrade suseRegisterUpgrade openldap2-client-64bitUpgrade autofsUpgrade sysfsutilsUpgrade microcode_ctlUpgrade yast2-mail-aliasesUpgrade krb5-devel-64bitUpgrade diffutilsUpgrade yast2-tvUpgrade dbus-1-qt3-32bitUpgrade bind-libs-32bitUpgrade ncurses-32bitUpgrade powersave-libs-x86Upgrade yast2-ldap-clientUpgrade yast2-mailUpgrade libzypp-zmd-backendUpgrade yast2-powertweakUpgrade e2fsprogs-32bitUpgrade pciutils-devel-64bitUpgrade xscsiUpgrade autoyast2Upgrade yast2-storage-libUpgrade halUpgrade ulimitUpgrade scsiUpgrade yast2-supportUpgrade yast2-ldapUpgrade module-init-toolsUpgrade libattr-x86Upgrade pcsc-liteUpgrade limal-perlUpgrade limal-bootloaderUpgrade powersave-libsUpgrade nfsidmapUpgrade libacl-devel-64bitUpgrade CheckHardwareUpgrade hal-gnomeUpgrade readline-32bitUpgrade liloUpgrade yast2-restoreUpgrade yast2-updateUpgrade parted-32bitUpgrade autoyast2-installationUpgrade yast2-kerberos-clientUpgrade yast2-hardware-detectionUpgrade krb5-x86Upgrade yast2-installationUpgrade dbus-1-javaUpgrade krb5-apps-serversUpgrade dbus-1-glib-x86Upgrade yast2-securityUpgrade ncurses-x86Upgrade binutils-32bitUpgrade filesystemUpgrade dbus-1-qt3-x86Upgrade pam-x86Upgrade sysfsutils-64bitUpgrade yast2-power-managementUpgrade dbus-1-monoUpgrade openldap2-devel-64bitUpgrade util-linuxUpgrade pam-modules-64bitUpgrade pam-develUpgrade krb5-devel-32bitUpgrade ncurses-develUpgrade hal-32bitUpgrade ncursesUpgrade pcsc-lite-develUpgrade pam-devel-32bitUpgrade pam-modules-32bitUpgrade krb5-clientUpgrade mcelogUpgrade yast2-countryUpgrade mdadmUpgrade yast2-ncursesUpgrade libzypp-develUpgrade pamUpgrade libacl-32bitUpgrade iputilsUpgrade cpioUpgrade syslogdUpgrade multipath-toolsUpgrade libattr-devel-64bitUpgrade powersave-libs-32bitUpgrade powersaveUpgrade pam-devel-64bitUpgrade yast2-theme-NLDUpgrade hal-develUpgrade zmd-inventoryUpgrade openldap2-back-perlUpgrade yast2-core-develUpgrade yast2-usersUpgrade libacl-64bitUpgrade readline-develUpgrade xntp-docUpgrade yast2-tuneUpgrade atUpgrade openldap2-develUpgrade libzyppUpgrade permissionsUpgrade readline-devel-64bitUpgrade yast2-slpUpgrade krb5Upgrade parted-64bitUpgrade limalUpgrade yast2-pkg-bindingsUpgrade yast2-profile-managerUpgrade dbus-1-glibUpgrade libaclUpgrade popt-devel-64bitUpgrade hwinfoUpgrade coreutilsUpgrade openldap2-clientUpgrade poptUpgrade bash-x86Upgrade pam-modules-x86Upgrade libattr-develUpgrade xntpUpgrade e2fsprogs-develUpgrade yast2-vmUpgrade bind-docUpgrade libcom_err-x86Upgrade sysvinitUpgrade yast2-packagerUpgrade dbus-1-gtkUpgrade screenUpgrade e2fsprogs-devel-64bitUpgrade popt-devel-32bitUpgrade perl-bootloaderUpgrade libattrUpgrade postfixUpgrade dbus-1Upgrade aaa_baseUpgrade yast2Upgrade yast2-ntp-clientUpgrade yast2-storage-evmsUpgrade bindUpgrade pam-32bitUpgrade liby2utilUpgrade zmd-develUpgrade krb5-32bitUpgrade yast2-schemaUpgrade dbus-1-develUpgrade procinfoUpgrade openldap2-client-32bitUpgrade pam-modulesUpgrade portmapUpgrade yast2-bootloaderUpgrade wireless-toolsUpgrade pciutils-develUpgrade bashUpgrade yast2-nis-clientUpgrade dbus-1-glib-32bitUpgrade openldap2-back-metaUpgrade powersave-libs-64bitUpgrade powersave-develUpgrade yast2-develUpgrade yast2-nfs-clientUpgrade attrUpgrade opensshUpgrade yast2-trans-statsUpgrade popt-develUpgrade krb5-develUpgrade bind-libs-x86Upgrade parted-develUpgrade sedUpgrade ncurses-64bitUpgrade openldap2Upgrade dbus-1-x86Upgrade hwinfo-develUpgrade yast2-online-update-frontendUpgrade e2fsprogs-x86Upgrade dbus-1-64bitUpgrade sysfsutils-32bitUpgrade yast2-printerUpgrade coreutils-x86Upgrade popt-32bitUpgrade bind-libsUpgrade yast2-backupUpgrade openssh-askpassUpgrade libattr-32bitUpgrade pciutils-devel-32bitUpgrade yast2-pamUpgrade readline-x86Upgrade krb5-64bitUpgrade zmdUpgrade xfsprogsUpgrade dbus-1-qt3-64bitUpgrade acl | Feb 17, 2015 | Nov 8, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub