OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2006.032
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2006.032
Advisory Published:      2010-02-09 16:40 UTC

Issue Id (internal):     OpenPKG-SI-20061108.01
Issue First Created:     2006-11-08
Issue Last Modified:     2006-12-07
Issue Revision:          08


Subject Name:            OpenSSH
Subject Summary:         Secure Shell (SSH)
Subject Home:            http://www.openssh.com/
Subject Versions:        * <= 4.4p1

Vulnerability Id:        CVE-2006-5794
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           privilege escalation

Description:
    According to a vendor release announcement [0], a vulnerability
    exists in the privilege separation functionality of the Secure
    Shell (SSH) implementation OpenSSH [1]. The vulnerability is
    caused by an incorrect checking for bad signatures in the sshd(8)
    privilege separation monitor and this way its verification of
    successful authentication is weakened. As a result the monitor and the
    unprivileged process can get out of sync. According to the vendor,
    this bug is not known to be exploitable in the absence of additional
    vulnerabilities. Additionally, OpenPKG's OpenSSH configuration for
    portability reasons has the "privilege separation" functionality not
    enabled by default.

References:
    [0] http://www.openssh.com/txt/release-4.5
    [1] http://www.openssh.com/


Primary Package Name:    openssh
Primary Package Home:    http://openpkg.org/go/package/openssh

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Enterprise       E1.0-SOLID        openssh-4.4p1-E1.0.0
OpenPKG Community        2-STABLE-20061018 openssh-4.4p1-2.20061024
OpenPKG Community        CURRENT           openssh-4.4p1-20061104

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Enterprise       E1.0-SOLID        openssh-4.4p1-E1.0.1
OpenPKG Community        2-STABLE-20061018 openssh-4.5p1-2.20061108
OpenPKG Community        CURRENT           openssh-4.5p1-20061108