CVE-2007-5794

CVE-2007-5794 describes a race condition in the nss_ldap component (nss_ldap and pam_ldap) that can occur when applications are linked against pthreads and fork after an LDAP call, potentially causing user data to be returned to the wrong process. The issue originates with improper handling of LD...

openSUSE 10 Security Update : openssh (openssh-2256)

The OpenSSH release 4.5 contains a security fix which has been backported to the openssh versions in our old products. CVE-2006-5794: Incorrect return argument checking in the privilege separation monitor was fixed. In case of an exploitable unprivileged helper this could have been used to elevat...

Low openssh security update

3.9p1-8.RHEL4.17.1 - CVE-2006-5794 properly detect failed key verify in monitor 21640...

CVE-2006-5794

The CVE-2006-5794 entry refers to an unspecified vulnerability in the sshd Privilege Separation Monitor of OpenSSH up to version 4.4/4.5 that weakens authentication verification and could allow bypass of authentication. As stated, exploitation is believed to require leveraging vulnerabilities in ...