Red Hat Security AdvisoryRHSA-2006:0697
openssh security update
Released 2006-09-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssh-3.6.1p2-33.30.12, openssh-3.6.1p2-33.30.12.i386, openssh-askpass-3.6.1p2-33.30.12 +7
- Red Hat Enterprise Linux AS version 3 openssh-3.6.1p2-33.30.12, openssh-3.6.1p2-33.30.12.i386, openssh-3.6.1p2-33.30.12.ia64 +17
- Red Hat Enterprise Linux AS version 4 openssh-3.9p1-8.RHEL4.17, openssh-3.9p1-8.RHEL4.17.i386, openssh-3.9p1-8.RHEL4.17.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 openssh-3.9p1-8.RHEL4.17, openssh-3.9p1-8.RHEL4.17.i386, openssh-askpass-3.9p1-8.RHEL4.17 +7
- Red Hat Enterprise Linux ES version 3 openssh-3.6.1p2-33.30.12, openssh-3.6.1p2-33.30.12.i386, openssh-3.6.1p2-33.30.12.ia64 +12
- Red Hat Enterprise Linux ES version 4 openssh-3.9p1-8.RHEL4.17, openssh-3.9p1-8.RHEL4.17.i386, openssh-3.9p1-8.RHEL4.17.ia64 +12
- Red Hat Enterprise Linux WS version 3 openssh-3.6.1p2-33.30.12, openssh-3.6.1p2-33.30.12.i386, openssh-3.6.1p2-33.30.12.ia64 +12
- Red Hat Enterprise Linux WS version 4 openssh-3.9p1-8.RHEL4.17, openssh-3.9p1-8.RHEL4.17.i386, openssh-3.9p1-8.RHEL4.17.ia64 +12
Fixes 2 records
Priority HIGH 65
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.45588 · Published 2006-09-27 · Fixed CWE-415
Priority MEDIUM 61
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.38118 · Published 2006-09-27 · Fixed CWE-399
