What’s Vulnerable › Vulnerabilities

CVE-2006-5794

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-11-08 · updated 2026-06-16

Description

Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.

Affected products

• OpenSSH: through 4.4

References

• http://rhn.redhat.com/errata/RHSA-2006-0738.html
• http://secunia.com/advisories/22771
• http://secunia.com/advisories/22772
• http://secunia.com/advisories/22773
• http://secunia.com/advisories/22778
• http://secunia.com/advisories/22814
• http://secunia.com/advisories/22872
• http://secunia.com/advisories/22932
• http://secunia.com/advisories/23513
• http://secunia.com/advisories/23680
• http://secunia.com/advisories/24055

Get alerted when CVE-2006-5794 or the next vulnerability affects your stack