Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openssh | Openbsd | * | 4.4 (including) |
| Red Hat Enterprise Linux 3 | RedHat | openssh-0:3.6.1p2-33.30.13 | * |
| Red Hat Enterprise Linux 4 | RedHat | openssh-0:3.9p1-8.RHEL4.17.1 | * |
| Openssh | Ubuntu | dapper | * |
| Openssh | Ubuntu | edgy | * |