National Cyber-Alert System

Vulnerability Summary for CVE-2006-4925

Overview

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (10/31/2006)

Red Hat does not consider this flaw a security issue. This flaw can cause an OpenSSH client to crash when connecting to a malicious server, which does not result in a denial of service condition.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: http://bugs.gentoo.org/show_bug.cgi?id=148228

Type: Patch Information

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=148228

External Source: CONFIRM

Name: http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.144&r2=1.145&f=h

Hyperlink:http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.144&r2=1.145&f=h

External Source: SUSE

Name: SUSE-SR:2006:024

Hyperlink:http://www.novell.com/linux/security/advisories/2006_24_sr.html

External Source: SECUNIA

Name: 22245

Hyperlink:http://secunia.com/advisories/22245

External Source: MANDRIVA

Name: MDKSA-2006:179

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:179

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-681

Hyperlink:https://issues.rpath.com/browse/RPL-681

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-661

Hyperlink:https://issues.rpath.com/browse/RPL-661

External Source: BUGTRAQ

Name: 20061005 rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447861/100/200/threaded

External Source: BUGTRAQ

Name: 20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447153/100/0/threaded

External Source: OPENPKG

Name: OpenPKG-SA-2006.022

Hyperlink:http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html

External Source: SUSE

Name: SUSE-SA:2006:062

Hyperlink:http://www.novell.com/linux/security/advisories/2006_62_openssh.html

External Source: MANDRIVA

Name: MDKSA-2006:179

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:179

External Source: SECUNIA

Name: 23038

Hyperlink:http://secunia.com/advisories/23038

External Source: SECUNIA

Name: 22495

Hyperlink:http://secunia.com/advisories/22495

External Source: SECUNIA

Name: 22298

Hyperlink:http://secunia.com/advisories/22298