Unscored severity · published Oct 10, 2006
CVE-2006-5229
OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via…
–
CVSS
58.3%
EPSS
No
On KEV
Description
OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime. NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds.
Exploitation
Is it being used?
Exploit prediction (EPSS)58.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openssh · Openbsd
4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5229
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5229
Vendor Advisory
http://secunia.com/advisories/25979
www.osvdb.org
http://www.osvdb.org/32721
www.securityfocus.com
http://www.securityfocus.com/archive/1/448025/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/448108/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/448156/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/448702/100/0/threaded
More from Openssh
9.8
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…
9.8
CVE-2023-28531
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints
9.8
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows…
9.8
CVE-2010-4478
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for…
9.8
CVE-2002-0639
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication)…