Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-5229
HistoryOct 10, 2006 - 11:07 p.m.

CVE-2006-5229

2006-10-1023:07:00
CWE-200
[email protected]
web.nvd.nist.gov
5

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.01

Percentile

84.1%

JSON

OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime. NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds.

Affected configurations

Nvd
Node
openbsdopensshMatch4.1
AND
novellsuse_linux
VendorProductVersionCPE
openbsdopenssh4.1cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*
novellsuse_linux*cpe:2.3:o:novell:suse_linux:*:*:*:*:*:*:*:*

Related

f5 2
ubuntucve 1
redhatcve 1
cve 1
cvelist 1
exploitpack 1
zdt 1
exploitdb 1
packetstorm 2
seebug 3
checkpoint_advisories 1
metasploit 1
nessus 2
f5
f5
SOL15493 - OpenSSH vulnerability CVE-2006-5229
2014-08-07 00:00:00
K15493 : OpenSSH vulnerability CVE-2006-5229
2014-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2006-5229
2006-10-10 00:00:00
redhatcve
redhatcve
CVE-2006-5229
2015-10-30 10:28:47
cve
cve
CVE-2006-5229
2006-10-10 23:07:00
cvelist
cvelist
CVE-2006-5229
2006-10-10 23:00:00
exploitpack
exploitpack
Portable OpenSSH 3.6.1p-PAM4.1-SuSE - Timing Attack
2007-02-13 00:00:00
zdt
zdt
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-13 00:00:00
exploitdb
exploitdb
Portable OpenSSH 3.6.1p-PAM/4.1-SuSE - Timing Attack
2007-02-13 00:00:00
packetstorm
packetstorm
openssh-timing.txt
2007-02-14 00:00:00
SSH Username Enumeration
2024-09-01 00:00:00
seebug
seebug
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2014-07-01 00:00:00
Portable OpenSSH &lt;= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-13 00:00:00
Portable OpenSSH &lt;= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)
2011-03-29 00:00:00
metasploit
metasploit
SSH Username Enumeration
2014-11-11 20:59:41
nessus
nessus
OpenSSH < 4.4 Multiple Vulnerabilities
2006-09-28 00:00:00
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
2011-08-29 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.01

Percentile

84.1%

JSON
Related for NVD:CVE-2006-5229
f52ubuntucve1redhatcve1cve1cvelist1exploitpack1zdt1exploitdb1packetstorm2seebug3checkpoint_advisories1metasploit1nessus2