CVE-2006-5052

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

• http://docs.info.apple.com/article.html?artnum=305214
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2
• http://openssh.org/txt/release-4.4
• http://rhn.redhat.com/errata/RHSA-2006-0697.htmlPatch
• http://secunia.com/advisories/22158Patch, Vendor Advisory
• http://secunia.com/advisories/22173Patch, Vendor Advisory
• http://secunia.com/advisories/22495
• http://secunia.com/advisories/22823
• http://secunia.com/advisories/24479
• http://secunia.com/advisories/27588
• http://secunia.com/advisories/28320
• http://security.gentoo.org/glsa/glsa-200611-06.xml
• http://securitytracker.com/id?1016939Patch
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566Patch
• http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm
• http://www.novell.com/linux/security/advisories/2006_62_openssh.html
• http://www.osvdb.org/29266
• http://www.redhat.com/support/errata/RHSA-2007-0540.html
• http://www.redhat.com/support/errata/RHSA-2007-0703.html
• http://www.securityfocus.com/archive/1/447861/100/200/threaded
• http://www.securityfocus.com/bid/20245Patch
• http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0930
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29255
• https://issues.rpath.com/browse/RPL-681
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178
• http://docs.info.apple.com/article.html?artnum=305214
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2
• http://openssh.org/txt/release-4.4
• http://rhn.redhat.com/errata/RHSA-2006-0697.htmlPatch
• http://secunia.com/advisories/22158Patch, Vendor Advisory
• http://secunia.com/advisories/22173Patch, Vendor Advisory
• http://secunia.com/advisories/22495
• http://secunia.com/advisories/22823
• http://secunia.com/advisories/24479
• http://secunia.com/advisories/27588
• http://secunia.com/advisories/28320
• http://security.gentoo.org/glsa/glsa-200611-06.xml
• http://securitytracker.com/id?1016939Patch
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566Patch
• http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm
• http://www.novell.com/linux/security/advisories/2006_62_openssh.html
• http://www.osvdb.org/29266
• http://www.redhat.com/support/errata/RHSA-2007-0540.html
• http://www.redhat.com/support/errata/RHSA-2007-0703.html
• http://www.securityfocus.com/archive/1/447861/100/200/threaded
• http://www.securityfocus.com/bid/20245Patch
• http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0930
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29255
• https://issues.rpath.com/browse/RPL-681
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178

Published

Sep 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5046Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.…
• CVE-2006-5047Unspecified vulnerability in rsgallery2.html.php in RS Galle…
• CVE-2006-5048Multiple PHP remote file inclusion vulnerabilities in Securi…
• CVE-2006-5049Unspecified vulnerability in Classifieds (com_classifieds) c…
• CVE-2006-5050Directory traversal vulnerability in httpd in Rob Landley Bu…
• CVE-2006-5051Signal handler race condition in OpenSSH before 4.4 allows r…8.1
• CVE-2006-5053PHP remote file inclusion vulnerability in webnews/template.…
• CVE-2006-5054SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi F…
• CVE-2006-5055PHP remote file inclusion vulnerability in admin/testing/tes…
• CVE-2006-5056Cross-site scripting (XSS) vulnerability in index.php in Opi…
• CVE-2006-5057Multiple cross-site scripting (XSS) vulnerabilities in Ktool…
• CVE-2006-5058Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Ca…