Detections
Analytics
OpenSSH < 4.4 Multiple Vulnerabilities
low Nessus Network Monitor Plugin ID 3751
Synopsis
The remote SSH server is affected by multiple vulnerabilities.Description
The version of OpenSSH running on the remote host is prior to version 4.4. Such versions are affected by multiple vulnerabilities:- A race condition exists that may allow an unauthenticated, remote attacker to crash the service or, on portable OpenSSH, possibly execute code on the affected host. Note that successful exploitation requires that GSSAPI authentication be enabled.
- A flaw exists that may allow an attacker to determine the validity of usernames on some platforms. Note that this issue requires that GSSAPI authentication be enabled.
- When SSH version 1 is used, an issue can be triggered via an SSH packet that contains duplicate blocks that could result in a loss of availability for the service.
- On Fedora Core 6 (and possibly other systems), an unspecified vulnerability in the linux_audit_record_event() function allows remote attackers to inject incorrect information into audit logs.
Solution
Upgrade to OpenSSH version 4.4 or higher.See Also
Plugin Details
Severity: Low
ID: 3751
Family: SSH
Published: 9/28/2006
Updated: 8/21/2019
Nessus ID: 22466
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.4
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:openbsd:openssh
Patch Publication Date: 9/28/2006
Vulnerability Publication Date: 9/28/2006
Reference Information
CVE: CVE-2006-4924, CVE-2006-4925, CVE-2006-5051, CVE-2006-5052, CVE-2006-5229, CVE-2007-3102, CVE-2008-4109