National Vulnerability Database (CVE-2006-5052)

National Cyber-Alert System Vulnerability Summary: CVE-2006-5052
Orirignal release date: 2006-09-27 Source: US-CERT/NIST ### Overview Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort." ### Impact CVSS Severity: 2.3 (Low) Range: remote Authentication: Impact Type: conf ### Reference to Advisories, Solutions, and Tools External Source: MLIST Name: m=115939141729160& Hyperlink: http://marc.theaimsgroup.com/?l=openssh-unix-dev& External Source: REDHAT Name: RHSA-2006:0697 Hyperlink: http://rhn.redhat.com/errata/RHSA-2006-0697.html External Source: SLACKWARE Name: y=2006& Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security& External Source: BID Name: 20245 Hyperlink: http://www.securityfocus.com/bid/20245 External Source: SECTRACK Name: 1016939 Hyperlink: http://securitytracker.com/id?1016939 External Source: SECUNIA Name: 22158 Hyperlink: http://secunia.com/advisories/22158 External Source: SECUNIA Name: 22173 Hyperlink: http://secunia.com/advisories/22173 External Source: BUGTRAQ Name: 20061005 rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server Hyperlink: http://www.securityfocus.com/archive/1/archive/1/447861/100/200/threaded External Source: NSO Name: https://issues.rpath.com/browse/RPL-681 Hyperlink: https://issues.rpath.com/browse/RPL-681 External Source: SUSE Name: SUSE-SA:2006:062 Hyperlink: http://www.novell.com/linux/security/advisories/2006_62_openssh.html External Source: SECUNIA Name: 22495 Hyperlink: http://secunia.com/advisories/22495 External Source: GENTOO Name: GLSA-200611-06 Hyperlink: http://security.gentoo.org/glsa/glsa-200611-06.xml External Source: SECUNIA Name: 22823 Hyperlink: http://secunia.com/advisories/22823 External Source: XF Name: openssh-gssapi-user-enumeration(29255) Hyperlink: http://xforce.iss.net/xforce/xfdb/29255 ### Vulnerable Software and Vendor OpenSSH (OpenBSD) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5052