NVD

Id
64369  
Name
CVE-2006-5794  
Description
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-08  
Modified Date
2011-03-07  
Seq
2006-5794  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335928 64369 CVE-2006-5794 20061201-01-P  View
335929 64369 CVE-2006-5794 oval:org.mitre.oval:def:11840  View
335930 64369 CVE-2006-5794 RHSA-2006:0738  View
335931 64369 CVE-2006-5794 1017183  View
335932 64369 CVE-2006-5794 http://sourceforge.net/project/shownotes.php?release_id=461854&group_id=69227  View
335933 64369 CVE-2006-5794 http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227  View
335934 64369 CVE-2006-5794 http://support.avaya.com/elmodocs2/security/ASA-2007-048.htm  View
335935 64369 CVE-2006-5794 MDKSA-2006:204  View
335936 64369 CVE-2006-5794 SUSE-SR:2006:026  View
335937 64369 CVE-2006-5794 OpenPKG-SA-2006.032  View
335938 64369 CVE-2006-5794 http://www.openssh.org/txt/release-4.5  View
335939 64369 CVE-2006-5794 20061109 rPSA-2006-0207-1 openssh openssh-client openssh-server  View
335940 64369 CVE-2006-5794 20956  View
335941 64369 CVE-2006-5794 http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html  View
335942 64369 CVE-2006-5794 http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html  View
335943 64369 CVE-2006-5794 ADV-2006-4399  View
335944 64369 CVE-2006-5794 ADV-2006-4400  View
335945 64369 CVE-2006-5794 openssh-separation-verificaton-weakness(30120)  View
335946 64369 CVE-2006-5794 https://issues.rpath.com/browse/RPL-766  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58567 JVNDB-2006-000763 OpenSSH の特権分離モニタにおける認証回避の脆弱性 OpenSSH には、sshd の特権分離モニタの実装に不備が存在するため、正しい認証情報を持たないユーザが不正にログイン可能な脆弱性が存在します。 CVE-2006-5794 21896 CVE-2006-5794 64369 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000763.html 2006-11-07 2007-07-13 View