Red Hat Bugzilla – Bug 214640
CVE-2006-5794 OpenSSH privilege separation flaw
Last modified: 2007-11-30 17:07:27 EST
OpenSSH has fixed a minor flaw that could allow a remote attacker to bypass
normal authentication mechanisms if a flaw is ever found that allows an attacker
to control the unprivileged process when privilege separation is enabled.
This flaw is not exploitable by itself. It requires a flaw which allows the
attacker to control the unprivileged process while privilege seperation is enabled.
This issue also affects RHEL3
Fixed packages for RHEL3: openssh-3.6.1p2-33.30.13 in dist-3.0E-errata-candidate
Fixed packages for RHEL4: openssh-3.9p1-8.RHEL4.17.1 in dist-4E-errata-candidate
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.