TopVuln

Details

CVSS v2

7.8

NVD published

2006-09-27 01:07:00

Affected versions

cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:* cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*

Summary

sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.

Remediation

Not available in our cache.

Exploit info

http://www.securityfocus.com/bid/20216