Red Hat Security AdvisoryRHSA-2006:0698
openssh security update
Released 2006-09-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 openssh-3.1p1-21, openssh-3.1p1-21.i386, openssh-3.1p1-21.ia64 +8
- Red Hat Enterprise Linux ES version 2.1 openssh-3.1p1-21, openssh-3.1p1-21.i386, openssh-askpass-3.1p1-21.i386 +3
- Red Hat Enterprise Linux WS version 2.1 openssh-3.1p1-21, openssh-3.1p1-21.i386, openssh-askpass-3.1p1-21.i386 +3
- Red Hat Linux Advanced Workstation 2.1 openssh-3.1p1-21, openssh-3.1p1-21.ia64, openssh-askpass-3.1p1-21.ia64 +3
Fixes 4 records
Priority HIGH 65
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.45588 · Published 2006-09-27 · Fixed CWE-415
Priority MEDIUM 61
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.38118 · Published 2006-09-27 · Fixed CWE-399
Priority MEDIUM 42
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a ho…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05766 · Published 2003-06-10 · Fixed
Priority LOW 22
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.0047 · Published 2006-01-25 · Fixed
THREATIST.IORead the docs