CVE-2006-5051 Race condition in n/a
Remote attackers can cause a crash or potentially execute code via a race condition in OpenSSH, particularly when GSSAPI authentication is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-5051?
CVE-2006-5051 is a high-severity vulnerability in Apple Mac Os X, published on 27 Sep 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
Weakness: CWE-415
Which versions are affected by CVE-2006-5051?
It affects 4 products.
Products include Apple Mac Os X, Apple Mac Os X Server, Debian Debian Linux, OpenSSH.
How do I fix CVE-2006-5051?
Upgrade to a fixed version.
Is CVE-2006-5051 being exploited?
There is no known exploitation of CVE-2006-5051 in the wild and no public exploit code.
Public exploit code: 3 proofs of concept on GitHub.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as DEBIAN-CVE-2006-5051, GHSA-mq5h-r3rg-j9hg.