CVE-2006-4925

概要

参考情報

• bugs.gentoo.org/show_bug.cgi · Exploit
• secunia.com/advisories/22245
• secunia.com/advisories/22298
• secunia.com/advisories/22495
• secunia.com/advisories/23038
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2006_24_sr.html
• novell.com/linux/security/advisories/2006_62_openssh.html
• openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff
• openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html
• securityfocus.com/archive/1/447153/100/0/threaded
• securityfocus.com/archive/1/447861/100/200/threaded
• issues.rpath.com/browse/RPL-661
• issues.rpath.com/browse/RPL-681

openssh のその他の脆弱性

• CVE-2026-106583高 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587低 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586中 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585中 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584低 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…