CVE-2006-5794

Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.

🔗 References (58)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2006-0738.html
• secalert@redhathttp://secunia.com/advisories/22771
• secalert@redhathttp://secunia.com/advisories/22772
• secalert@redhathttp://secunia.com/advisories/22773
• secalert@redhathttp://secunia.com/advisories/22778
• secalert@redhathttp://secunia.com/advisories/22814
• secalert@redhathttp://secunia.com/advisories/22872
• secalert@redhathttp://secunia.com/advisories/22932
• secalert@redhathttp://secunia.com/advisories/23513
• secalert@redhathttp://secunia.com/advisories/23680
• secalert@redhathttp://secunia.com/advisories/24055
• secalert@redhathttp://securitytracker.com/id?1017183
• secalert@redhathttp://sourceforge.net/project/shownotes.php?release_id=461854&group_id=69227
• secalert@redhathttp://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227