CVE-2006-5052
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
Exploit likelihood
What each source reports
NVD Score used
5.0
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
CVE-2006-5052- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
CVE-2006-5052- Updated
- 2026-11-02
EUVDEUVD-2006-5037 No score
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
EUVD-2006-5037- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mhjc-ghvw-2hvv No score
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
GHSA-mhjc-ghvw-2hvv- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
CVE-2006-5052- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5052 No score
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
- Record
DEBIAN-CVE-2006-5052- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 |
before 1:4.6p1-1 | 1:4.6p1-1 |
opensshDebian:13 |
before 1:4.6p1-1 | 1:4.6p1-1 |
opensshDebian:14 |
before 1:4.6p1-1 | 1:4.6p1-1 |
opensshRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-askpassRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-clientsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-serverRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
opensshRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-askpassRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssh-clientsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
openssh-serverRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.3p2-24.el5 | 0:4.3p2-24.el5 |
opensshRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpassRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-clientsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-serverRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
opensshRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpassRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-clientsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
opensshRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpassRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-clientsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-serverRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
opensshRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpassRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-clientsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
openssh-serverRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.24 | 0:3.9p1-8.RHEL4.24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5052 is a medium vulnerability (CVSS 5.0) in Openbsd Openssh, published September 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.91%, the 87th percentile. Fixed in openssh 1:4.6p1-1.
References
securityfocus.com/bid/20245
securityfocus.com/archive/1/447861/100/200/threaded
openssh.org/txt/release-4.4
us-cert.gov/cas/techalerts/TA07-072A.html
security.gentoo.org/glsa/glsa-200611-06.xml
novell.com/linux/security/advisories/2006_62_openssh.html
Show 47 moreShow less
lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
osvdb.org/29266
docs.info.apple.com/article.html?artnum=305214
secunia.com/advisories/27588
issues.rpath.com/browse/RPL-681
securitytracker.com/id?1016939
support.avaya.com/elmodocs2/security/ASA-2007-527.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178
exchange.xforce.ibmcloud.com/vulnerabilities/29255
secunia.com/advisories/22495
secunia.com/advisories/22823
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566
marc.info?l=openssh-unix-dev&m=115939141729160&w=2
redhat.com/support/errata/RHSA-2007-0703.html
rhn.redhat.com/errata/RHSA-2006-0697.html
vupen.com/english/advisories/2007/0930
secunia.com/advisories/28320
secunia.com/advisories/22173
redhat.com/support/errata/RHSA-2007-0540.html
secunia.com/advisories/22158
secunia.com/advisories/24479
nvd.nist.gov/vuln/detail/CVE-2006-5052
github.com/advisories/GHSA-mhjc-ghvw-2hvv
security-tracker.debian.org/tracker/CVE-2006-5052
access.redhat.com/errata/RHSA-2007:0540
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=227733
bugzilla.redhat.com/show_bug.cgi?id=229278
bugzilla.redhat.com/show_bug.cgi?id=231695
bugzilla.redhat.com/show_bug.cgi?id=234638
bugzilla.redhat.com/show_bug.cgi?id=234951
bugzilla.redhat.com/show_bug.cgi?id=248059
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0540.json
access.redhat.com/security/cve/CVE-2006-5052
bugzilla.redhat.com/show_bug.cgi?id=234643
cve.org/CVERecord?id=CVE-2006-5052
access.redhat.com/security/cve/CVE-2007-3102
bugzilla.redhat.com/show_bug.cgi?id=243204
cve.org/CVERecord?id=CVE-2007-3102
nvd.nist.gov/vuln/detail/CVE-2007-3102
access.redhat.com/errata/RHSA-2007:0703
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=240909
bugzilla.redhat.com/show_bug.cgi?id=244655
bugzilla.redhat.com/show_bug.cgi?id=247802
bugzilla.redhat.com/show_bug.cgi?id=248058
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0703.json