National Cyber-Alert System

Vulnerability Summary for CVE-2006-4924

Overview

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#787448

Name: VU#787448

Hyperlink:http://www.kb.cert.org/vuls/id/787448

US-CERT Technical Alert: TA07-072A

Name: TA07-072A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-072A.html

External Source: MISC

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955

Type: Advisory; Patch Information

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955

External Source: BID

Name: 20216

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/20216

External Source: VUPEN

Name: ADV-2006-3777

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2006/3777

External Source: DEBIAN

Name: DSA-1212

Type: Patch Information

Hyperlink:http://www.debian.org/security/2006/dsa-1212

External Source: DEBIAN

Name: DSA-1189

Type: Patch Information

Hyperlink:http://www.debian.org/security/2006/dsa-1189

External Source: CONFIRM

Name: https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg

Hyperlink:https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg

External Source: XF

Name: openssh-block-dos(29158)

Hyperlink:http://xforce.iss.net/xforce/xfdb/29158

External Source: VUPEN

Name: ADV-2009-0740

Hyperlink:http://www.vupen.com/english/advisories/2009/0740

External Source: UBUNTU

Name: USN-355-1

Hyperlink:http://www.ubuntu.com/usn/usn-355-1

External Source: TRUSTIX

Name: 2006-0054

Hyperlink:http://www.trustix.org/errata/2006/0054

External Source: REDHAT

Name: RHSA-2006:0698

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0698.html

External Source: REDHAT

Name: RHSA-2006:0697

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0697.html

External Source: OSVDB

Name: 29152

Hyperlink:http://www.osvdb.org/29152

External Source: OPENPKG

Name: OpenPKG-SA-2006.022

Hyperlink:http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html

External Source: OPENBSD

Name: [2.9] 015: SECURITY FIX: October 12, 2006

Hyperlink:http://www.openbsd.org/errata.html#ssh

External Source: SUSE

Name: SUSE-SA:2006:062

Hyperlink:http://www.novell.com/linux/security/advisories/2006_62_openssh.html

External Source: SUSE

Name: SUSE-SR:2006:024

Hyperlink:http://www.novell.com/linux/security/advisories/2006_24_sr.html

External Source: VUPEN

Name: ADV-2006-4869

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/4869

External Source: VUPEN

Name: ADV-2006-4401

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/4401

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm

External Source: CONFIRM

Name: http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227

Hyperlink:http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227

External Source: SLACKWARE

Name: SSA:2006-272-02

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566

External Source: SECTRACK

Name: 1016931

Hyperlink:http://securitytracker.com/id?1016931

External Source: GENTOO

Name: GLSA-200611-06

Hyperlink:http://security.gentoo.org/glsa/glsa-200611-06.xml

External Source: GENTOO

Name: GLSA-200609-17

Hyperlink:http://security.gentoo.org/glsa/glsa-200609-17.xml

External Source: FREEBSD

Name: FreeBSD-SA-06:22

Hyperlink:http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc

External Source: SECUNIA

Name: 34274

Hyperlink:http://secunia.com/advisories/34274

External Source: SECUNIA

Name: 23241

Type: Advisory

Hyperlink:http://secunia.com/advisories/23241

External Source: SECUNIA

Name: 23038

Type: Advisory

Hyperlink:http://secunia.com/advisories/23038

External Source: SECUNIA

Name: 22926

Type: Advisory

Hyperlink:http://secunia.com/advisories/22926

External Source: SECUNIA

Name: 22823

Type: Advisory

Hyperlink:http://secunia.com/advisories/22823

External Source: SECUNIA

Name: 22495

Type: Advisory

Hyperlink:http://secunia.com/advisories/22495

External Source: SECUNIA

Name: 22487

Type: Advisory

Hyperlink:http://secunia.com/advisories/22487

External Source: SECUNIA

Name: 22362

Type: Advisory

Hyperlink:http://secunia.com/advisories/22362

External Source: SECUNIA

Name: 22352

Type: Advisory

Hyperlink:http://secunia.com/advisories/22352

External Source: SECUNIA

Name: 22270

Type: Advisory

Hyperlink:http://secunia.com/advisories/22270

External Source: SECUNIA

Name: 22245

Type: Advisory

Hyperlink:http://secunia.com/advisories/22245

External Source: SECUNIA

Name: 22236

Type: Advisory

Hyperlink:http://secunia.com/advisories/22236

External Source: SECUNIA

Name: 22208

Type: Advisory

Hyperlink:http://secunia.com/advisories/22208

External Source: SECUNIA

Name: 22196

Type: Advisory

Hyperlink:http://secunia.com/advisories/22196

External Source: SECUNIA

Name: 22183

Hyperlink:http://secunia.com/advisories/22183

External Source: SECUNIA

Name: 22164

Type: Advisory

Hyperlink:http://secunia.com/advisories/22164

External Source: SECUNIA

Name: 22158

Type: Advisory

Hyperlink:http://secunia.com/advisories/22158

External Source: SECUNIA

Name: 22116

Type: Advisory

Hyperlink:http://secunia.com/advisories/22116

External Source: SECUNIA

Name: 22091

Type: Advisory

Hyperlink:http://secunia.com/advisories/22091

External Source: SECUNIA

Name: 21923

Type: Advisory

Hyperlink:http://secunia.com/advisories/21923

External Source: MLIST

Name: [openssh-unix-dev] 20060927 Announce: OpenSSH 4.4 released

Hyperlink:http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=115939141729160&w=2

External Source: HP

Name: SSRT061267

Hyperlink:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112

External Source: MANDRIVA

Name: MDKSA-2006:179

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:179

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=148228

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=148228

External Source: SGI

Name: 20061001-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc

External Source: FREEBSD

Name: FreeBSD-SA-06:22.openssh

Hyperlink:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-661

Hyperlink:https://issues.rpath.com/browse/RPL-661

External Source: CONFIRM

Name: http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

Hyperlink:http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

External Source: CONFIRM

Name: http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

Hyperlink:http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

External Source: BUGTRAQ

Name: 20060927 rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447153/100/0/threaded

External Source: MANDRIVA

Name: MDKSA-2006:179

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:179

External Source: VUPEN

Name: ADV-2007-2119

Hyperlink:http://www.frsirt.com/english/advisories/2007/2119

External Source: VUPEN

Name: ADV-2007-1332

Hyperlink:http://www.frsirt.com/english/advisories/2007/1332

External Source: VUPEN

Name: ADV-2007-0930

Hyperlink:http://www.frsirt.com/english/advisories/2007/0930

External Source: MLIST

Name: [security-announce] 20070409 Globus Security Advisory 2007-02: GSI-OpenSSH vulnerability

Hyperlink:http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm

External Source: SUNALERT

Name: 102962

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1

External Source: CONFIRM

Name: http://sourceforge.net/forum/forum.php?forum_id=681763

Hyperlink:http://sourceforge.net/forum/forum.php?forum_id=681763

External Source: SECUNIA

Name: 29371

Hyperlink:http://secunia.com/advisories/29371

External Source: SECUNIA

Name: 25608

Hyperlink:http://secunia.com/advisories/25608

External Source: SECUNIA

Name: 24805

Hyperlink:http://secunia.com/advisories/24805

External Source: SECUNIA

Name: 24799

Hyperlink:http://secunia.com/advisories/24799

External Source: SECUNIA

Name: 24479

Hyperlink:http://secunia.com/advisories/24479

External Source: SECUNIA

Name: 23680

Hyperlink:http://secunia.com/advisories/23680

External Source: SECUNIA

Name: 23340

Hyperlink:http://secunia.com/advisories/23340

External Source: SECUNIA

Name: 22298

Hyperlink:http://secunia.com/advisories/22298

External Source: APPLE

Name: APPLE-SA-2007-03-13

Hyperlink:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=305214

Hyperlink:http://docs.info.apple.com/article.html?artnum=305214

External Source: CONFIRM

Name: http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability

Hyperlink:http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability

External Source: SCO

Name: SCOSA-2008.2

Hyperlink:ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt

US Government Resource: oval:org.mitre.oval:def:1193

Name: oval:org.mitre.oval:def:1193

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1193