Every CVE Search/ Get API key

CVE-2006-5052

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...

5.0 MediumFix available

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Exploit likelihood

2.91%Down 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
CVE-2006-5052
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
CVE-2006-5052
Updated
2026-11-02
EUVDEUVD-2006-5037 No score

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
EUVD-2006-5037
Updated
2026-11-03
GitHub AdvisoriesGHSA-mhjc-ghvw-2hvv No score

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
GHSA-mhjc-ghvw-2hvv
Updated
2026-11-02
OSV No score

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
CVE-2006-5052
Updated
2026-11-02
OSVDEBIAN-CVE-2006-5052 No score

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Record
DEBIAN-CVE-2006-5052
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Debian:12
before 1:4.6p1-1
1:4.6p1-1
openssh
Debian:13
before 1:4.6p1-1
1:4.6p1-1
openssh
Debian:14
before 1:4.6p1-1
1:4.6p1-1
openssh
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-askpass
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-clients
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-server
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-askpass
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
Show 27 moreShow less
Affected packages
PackageAffectedFixed
openssh-clients
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh-server
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.3p2-24.el5
0:4.3p2-24.el5
openssh
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass-gnome
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-clients
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-server
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass-gnome
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-clients
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-server
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass-gnome
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-clients
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-server
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-askpass-gnome
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-clients
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24
openssh-server
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
before 0:3.9p1-8.RHEL4.24
0:3.9p1-8.RHEL4.24

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5052 is a medium vulnerability (CVSS 5.0) in Openbsd Openssh, published September 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.91%, the 87th percentile. Fixed in openssh 1:4.6p1-1.

References

Show 47 moreShow less
MoveEnter Open