NVD

Id
63539  
Name
CVE-2006-4924  
Description
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2006-09-26  
Modified Date
2016-10-17  
Seq
2006-4924  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
331149 63539 CVE-2006-4924 FreeBSD-SA-06:22.openssh  View
331150 63539 CVE-2006-4924 SCOSA-2008.2  View
331151 63539 CVE-2006-4924 20061001-01-P  View
331152 63539 CVE-2006-4924 http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability  View
331153 63539 CVE-2006-4924 http://bugs.gentoo.org/show_bug.cgi?id=148228  View
331154 63539 CVE-2006-4924 http://docs.info.apple.com/article.html?artnum=305214  View
331155 63539 CVE-2006-4924 SSRT061267  View
331156 63539 CVE-2006-4924 APPLE-SA-2007-03-13  View
331157 63539 CVE-2006-4924 [openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released  View
331158 63539 CVE-2006-4924 oval:org.mitre.oval:def:10462  View
331159 63539 CVE-2006-4924 oval:org.mitre.oval:def:1193  View
331160 63539 CVE-2006-4924 FreeBSD-SA-06:22  View
331161 63539 CVE-2006-4924 GLSA-200609-17  View
331162 63539 CVE-2006-4924 GLSA-200611-06  View
331163 63539 CVE-2006-4924 1016931  View
331164 63539 CVE-2006-4924 SSA:2006-272-02  View
331165 63539 CVE-2006-4924 http://sourceforge.net/forum/forum.php?forum_id=681763  View
331166 63539 CVE-2006-4924 http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227  View
331167 63539 CVE-2006-4924 102962  View
331168 63539 CVE-2006-4924 http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm  View
331169 63539 CVE-2006-4924 http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm  View
331170 63539 CVE-2006-4924 [security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability  View
331171 63539 CVE-2006-4924 DSA-1189  View
331172 63539 CVE-2006-4924 DSA-1212  View
331173 63539 CVE-2006-4924 VU#787448  View
331174 63539 CVE-2006-4924 MDKSA-2006:179  View
331175 63539 CVE-2006-4924 SUSE-SR:2006:024  View
331176 63539 CVE-2006-4924 SUSE-SA:2006:062  View
331177 63539 CVE-2006-4924 [2.9] 015: SECURITY FIX: October 12, 2006  View
331178 63539 CVE-2006-4924 OpenPKG-SA-2006.022  View
331179 63539 CVE-2006-4924 RHSA-2006:0697  View
331180 63539 CVE-2006-4924 RHSA-2006:0698  View
331181 63539 CVE-2006-4924 20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server  View
331182 63539 CVE-2006-4924 20216  View
331183 63539 CVE-2006-4924 2006-0054  View
331184 63539 CVE-2006-4924 USN-355-1  View
331185 63539 CVE-2006-4924 TA07-072A  View
331186 63539 CVE-2006-4924 http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html  View
331187 63539 CVE-2006-4924 http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html  View
331188 63539 CVE-2006-4924 ADV-2006-3777  View
331189 63539 CVE-2006-4924 ADV-2006-4401  View
331190 63539 CVE-2006-4924 ADV-2006-4869  View
331191 63539 CVE-2006-4924 ADV-2007-0930  View
331192 63539 CVE-2006-4924 ADV-2007-1332  View
331193 63539 CVE-2006-4924 ADV-2007-2119  View
331194 63539 CVE-2006-4924 ADV-2009-0740  View
331195 63539 CVE-2006-4924 openssh-block-dos(29158)  View
331196 63539 CVE-2006-4924 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955  View
331197 63539 CVE-2006-4924 https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg  View
331198 63539 CVE-2006-4924 https://issues.rpath.com/browse/RPL-661  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58391 JVNDB-2006-000587 OpenSSH の sshd における CPU リソース大量消費の脆弱性 OpenSSH には、SSH1 プロトコルを有効にしている場合に、sshd がパケット内の CRC (巡回冗長検査) を適切に処理できずに CPU リソースを大量に消費してしまう脆弱性が存在します。 CVE-2006-4924 21026 CVE-2006-4924 63539 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000587.html 2006-09-26 2009-11-16 View