CVE-2006-5052: Medium severity OpenBSD OpenSSH vulnerability
Published Sep 27, 2006
·Updated
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
Affected Software
56 affected components
OpenBSD OpenSSH=3.8
OpenBSD OpenSSH=3.8.1p1
OpenBSD OpenSSH=3.2.2
OpenBSD OpenSSH=3.1
OpenBSD OpenSSH=3.0.2p1
OpenBSD OpenSSH=3.8.1
OpenBSD OpenSSH=2.1.1
OpenBSD OpenSSH=3.7.1p2
OpenBSD OpenSSH=3.2.3p1
OpenBSD OpenSSH=3.1p1
OpenBSD OpenSSH=2.5.1
OpenBSD OpenSSH=2.9.9p2
OpenBSD OpenSSH=3.6.1p2
OpenBSD OpenSSH=3.9
OpenBSD OpenSSH=3.0
OpenBSD OpenSSH=1.2.1
OpenBSD OpenSSH=2.2
OpenBSD OpenSSH=3.2
OpenBSD OpenSSH=3.6
OpenBSD OpenSSH=1.2.3
OpenBSD OpenSSH=3.7
OpenBSD OpenSSH=4.0p1
OpenBSD OpenSSH=3.5p1
OpenBSD OpenSSH=3.0.1p1
OpenBSD OpenSSH=3.7.1p1
OpenBSD OpenSSH=2.1
OpenBSD OpenSSH=1.2
OpenBSD OpenSSH=3.3
OpenBSD OpenSSH=3.2.2p1
OpenBSD OpenSSH=3.9.1p1
OpenBSD OpenSSH=3.0.2
OpenBSD OpenSSH=3.4p1
OpenBSD OpenSSH=3.6.1p1
OpenBSD OpenSSH=3.0.1
OpenBSD OpenSSH=2.9.9
OpenBSD OpenSSH=3.6.1
OpenBSD OpenSSH=4.1p1
OpenBSD OpenSSH=1.2.2
OpenBSD OpenSSH=4.2p1
OpenBSD OpenSSH=2.9p1
OpenBSD OpenSSH=2.9
OpenBSD OpenSSH=3.7.1
OpenBSD OpenSSH=1.2.27
OpenBSD OpenSSH=4.2
OpenBSD OpenSSH=2.5.2
OpenBSD OpenSSH=2.3
OpenBSD OpenSSH=3.4
OpenBSD OpenSSH=4.3p1
OpenBSD OpenSSH=3.5
OpenBSD OpenSSH=2.5
OpenBSD OpenSSH=3.0p1
OpenBSD OpenSSH=3.3p1
OpenBSD OpenSSH=4.3
OpenBSD OpenSSH=4.0
OpenBSD OpenSSH=3.9.1
OpenBSD OpenSSH=2.9p2
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Sep 27, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:07 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5052?
CVE-2006-5052 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-5052?
To fix CVE-2006-5052, you should upgrade to OpenSSH version 4.4 or later.
3
What platforms are affected by CVE-2006-5052?
CVE-2006-5052 affects portable OpenSSH running on certain unspecified platforms.
4
What type of attack does CVE-2006-5052 involve?
CVE-2006-5052 allows remote attackers to determine the validity of usernames through GSSAPI authentication aborts.
5
Is CVE-2006-5052 still a concern today?
CVE-2006-5052 may still be a concern if outdated versions of OpenSSH are in use, especially in legacy systems.