CVE-2006-5794
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
CVE-2006-5794- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
CVE-2006-5794- Updated
- 2026-11-02
EUVDEUVD-2006-5778 No score
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
EUVD-2006-5778- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5r9x-42xj-4x3r No score
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
GHSA-5r9x-42xj-4x3r- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
CVE-2006-5794- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5794 No score
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
- Record
DEBIAN-CVE-2006-5794- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 |
before 1:4.3p2-6 | 1:4.3p2-6 |
opensshDebian:13 |
before 1:4.3p2-6 | 1:4.3p2-6 |
opensshDebian:14 |
before 1:4.3p2-6 | 1:4.3p2-6 |
opensshRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpassRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-clientsRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-serverRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
opensshRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssh-askpassRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-clientsRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-serverRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
opensshRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpassRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-clientsRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-serverRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
opensshRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpassRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-clientsRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
openssh-serverRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.13 | 0:3.6.1p2-33.30.13 |
opensshRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpassRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-clientsRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-serverRed Hat:enterprise_linux:4::as |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
opensshRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpassRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-clientsRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-serverRed Hat:enterprise_linux:4::desktop |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
opensshRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpassRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-clientsRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-serverRed Hat:enterprise_linux:4::es |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
opensshRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpassRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-clientsRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
openssh-serverRed Hat:enterprise_linux:4::ws |
before 0:3.9p1-8.RHEL4.17.1 | 0:3.9p1-8.RHEL4.17.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5794 is a high vulnerability (CVSS 7.5) in Openbsd Openssh, published November 8, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in openssh 1:4.3p2-6.
References
securitytracker.com/id?1017183
sourceforge.net/project/shownotes.php?release_id=461854&group_id=69227
secunia.com/advisories/22932
vmware.com/support/vi3/doc/esx-3069097-patch.html
Show 32 moreShow less
issues.rpath.com/browse/RPL-766
vupen.com/english/advisories/2006/4399
novell.com/linux/security/advisories/2006_26_sr.html
exchange.xforce.ibmcloud.com/vulnerabilities/30120
support.avaya.com/elmodocs2/security/ASA-2007-048.htm
securityfocus.com/archive/1/451100/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11840
mandriva.com/security/advisories?name=MDKSA-2006:204
openssh.org/txt/release-4.5
openpkg.org/security/advisories/OpenPKG-SA-2006.032-openssh.html
rhn.redhat.com/errata/RHSA-2006-0738.html
nvd.nist.gov/vuln/detail/CVE-2006-5794
github.com/advisories/GHSA-5r9x-42xj-4x3r
security-tracker.debian.org/tracker/CVE-2006-5794
access.redhat.com/errata/RHSA-2006:0738
bugzilla.redhat.com/show_bug.cgi?id=214640
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0738.json
cve.org/CVERecord?id=CVE-2006-5794