Bug 214640

Summary:	CVE-2006-5794 OpenSSH privilege separation flaw
Product:	Red Hat Enterprise Linux 4	Reporter:	Josh Bressers <bressers>
Component:	openssh	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED ERRATA	QA Contact:	Brian Brock <bbrock>
Severity:	low	Docs Contact:
Priority:	medium
Version:	4.0	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://www.openssh.com/txt/release-4.5
Whiteboard:	source=vendorsec,reported=20061107,impact=low,public=20061107
Fixed In Version:	RHSA-2006-0738	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-11-15 14:19:06 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2006-11-08 18:54:22 UTC

OpenSSH has fixed a minor flaw that could allow a remote attacker to bypass
normal authentication mechanisms if a flaw is ever found that allows an attacker
to control the unprivileged process when privilege separation is enabled.

This flaw is not exploitable by itself.  It requires a flaw which allows the
attacker to control the unprivileged process while privilege seperation is enabled.

This issue also affects RHEL3

Comment 1 Tomas Mraz 2006-11-10 13:51:07 UTC

Fixed packages for RHEL3: openssh-3.6.1p2-33.30.13 in dist-3.0E-errata-candidate

Fixed packages for RHEL4: openssh-3.9p1-8.RHEL4.17.1 in dist-4E-errata-candidate

Comment 4 Red Hat Bugzilla 2006-11-15 14:19:07 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2006-0738.html