{"containers":{"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-01-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"},{"name":"ADV-2006-4502","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/4502"},{"name":"[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2"},{"name":"16567","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/16567"},{"name":"22875","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22875"},{"name":"23680","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/23680"},{"name":"openssh-sshdc-logingracetime-dos(20930)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html"},{"name":"20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded"},{"name":"FLSA-2006:168935","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html"},{"name":"[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"},{"name":"17000","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17000"},{"name":"14963","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14963"},{"name":"17252","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17252"},{"name":"17135","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17135"},{"name":"20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded"},{"name":"oval:org.mitre.oval:def:11541","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"},{"name":"RHSA-2005:550","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html"},{"name":"20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"}]},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-08T01:15:01.224Z"},"title":"CVE Program Container","references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"},{"name":"ADV-2006-4502","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/4502"},{"name":"[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2"},{"name":"16567","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/16567"},{"name":"22875","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22875"},{"name":"23680","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/23680"},{"name":"openssh-sshdc-logingracetime-dos(20930)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html"},{"name":"20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded"},{"name":"FLSA-2006:168935","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html"},{"name":"[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf"},{"name":"17000","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17000"},{"name":"14963","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14963"},{"name":"17252","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17252"},{"name":"17135","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17135"},{"name":"20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded"},{"name":"oval:org.mitre.oval:def:11541","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541"},{"name":"RHSA-2005:550","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html"},{"name":"20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"}]}]},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2004-2069","datePublished":"2005-05-05T04:00:00.000Z","dateReserved":"2005-05-05T00:00:00.000Z","dateUpdated":"2024-08-08T01:15:01.224Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"}