The remote NewStart CGSL host, running version MAIN 6.06 (SP), has openssh packages installed that are affected by multiple vulnerabilities:

  - The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and     relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a     fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11     server, as demonstrated by lack of the SECURITY extension on this X11 server. (CVE-2016-1908)

  - Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors     that lead to a double-free. (CVE-2006-5051)

  - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice. (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a     denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not     properly handled by the CRC compensation attack detector. (CVE-2006-4924)

  - Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful, which might allow attackers to bypass     authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging     vulnerabilities in the unprivileged process, which are not known to exist. (CVE-2006-5794)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated openssh packages that fix several security issues in sshd are now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having important security impact by the Red Hat Security Response Team.

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This package includes the core files necessary for both the OpenSSH client and server.

Mark Dowd discovered a signal handler race condition in the OpenSSH sshd server. A remote attacker could possibly leverage this flaw to cause a denial of service (crash). (CVE-2006-5051) The OpenSSH project believes the likelihood of successful exploitation leading to arbitrary code execution appears remote. However, the Red Hat Security Response Team have not yet been able to verify this claim due to lack of upstream vulnerability information. We are therefore including a fix for this flaw and have rated it important security severity in the event our continued investigation finds this issue to be exploitable.

Tavis Ormandy of the Google Security Team discovered a denial of service bug in the OpenSSH sshd server. A remote attacker can send a specially crafted SSH-1 request to the server causing sshd to consume a large quantity of CPU resources. (CVE-2006-4924)

An arbitrary command execution flaw was discovered in the way scp copies files locally. It is possible for a local attacker to create a file with a carefully crafted name that could execute arbitrary commands as the user running scp to copy files locally.
(CVE-2006-0225)

The SSH daemon, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass 'from=' and 'user@host' address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address. (CVE-2003-0386)

All users of openssh should upgrade to these updated packages, which contain backported patches that resolve these issues.

Several security problems were fixed in OpenSSH :

  - A denial of service problem has been fixed in OpenSSH     which could be used to cause lots of CPU consumption on     a remote openssh server. (CVE-2006-4924)

  - If a remote attacker is able to inject network traffic     this could be used to cause a client connection to     close. (CVE-2006-4925)

  - Fixed an unsafe signal hander reported by Mark Dowd. The     signal handler was vulnerable to a race condition that     could be exploited to perform a pre-authentication     denial of service. This vulnerability could     theoretically lead to pre-authentication remote code     execution if GSSAPI authentication is enabled, but the     likelihood of successful exploitation appears remote.
    (CVE-2006-5051)

  - Fixed a GSSAPI authentication abort that could be used     to determine the validity of usernames on some     platforms. (CVE-2006-5052)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1419 advisory.

    This advisory aggregates security fixes for the openssh SRPM in CIQ LTS 9.6. It addresses 32 CVEs:
    CVE-2025-26465, CVE-2016-1908, CVE-2014-2532, CVE-2026-35388, CVE-2023-48795, and 27 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities:

  - scp in OpenSSH 4.2p1 allows attackers to execute     arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice.
    (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH     protocol, allows remote attackers to cause a denial of     service (CPU consumption) via an SSH packet that     contains duplicate blocks, which is not properly handled     by the CRC compensation attack detector. (CVE-2006-4924)

  - Signal handler race condition in OpenSSH before 4.4     allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI     authentication is enabled, via unspecified vectors that     lead to a double-free. (CVE-2006-5051)

  - Unspecified vulnerability in the sshd Privilege     Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful,     which might allow attackers to bypass authentication.
    NOTE: as of 20061108, it is believed that this issue is     only exploitable by leveraging vulnerabilities in the     unprivileged process, which are not known to exist.
    (CVE-2006-5794)

  - Unspecified vulnerability in the     linux_audit_record_event function in OpenSSH 4.3p2, as     used on Fedora Core 6 and possibly other systems, allows     remote attackers to write arbitrary characters to an     audit log via a crafted username. NOTE: some of these     details are obtained from third party information.
    (CVE-2007-3102)

  - The (1) remote_glob function in sftp-glob.c and the (2)     process_put function in sftp.c in OpenSSH 5.8 and     earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2,     OpenBSD 4.7, and other products, allow remote     authenticated users to cause a denial of service (CPU     and memory consumption) via crafted glob expressions     that do not match any pathnames, as demonstrated by glob     expressions in SSH_FXP_STAT requests to an sftp daemon,     a different vulnerability than CVE-2010-2632.
    (CVE-2010-4755)

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - It was found that OpenSSH did not properly handle     certain AcceptEnv parameter values with wildcard     characters. A remote attacker could use this flaw to     bypass intended environment variable restrictions.
    (CVE-2014-2532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

SunOS 5.10: sshd patch.
Date this patch was last updated by Sun : Jun/20/07

Updated openssh packages that fix two security flaws are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This package includes the core files necessary for both the OpenSSH client and server.

Mark Dowd discovered a signal handler race condition in the OpenSSH sshd server. A remote attacker could possibly leverage this flaw to cause a denial of service (crash). (CVE-2006-5051) The OpenSSH project believes the likelihood of successful exploitation leading to arbitrary code execution appears remote. However, the Red Hat Security Response Team have not yet been able to verify this claim due to lack of upstream vulnerability information. We are therefore including a fix for this flaw and have rated it important security severity in the event our continued investigation finds this issue to be exploitable.

Tavis Ormandy of the Google Security Team discovered a denial of service bug in the OpenSSH sshd server. A remote attacker can send a specially crafted SSH-1 request to the server causing sshd to consume a large quantity of CPU resources. (CVE-2006-4924)

All users of openssh should upgrade to these updated packages, which contain backported patches that resolves these issues.

Tavis Ormandy discovered that the SSH daemon did not properly handle authentication packets with duplicated blocks. By sending specially crafted packets, a remote attacker could exploit this to cause the ssh daemon to drain all available CPU resources until the login grace time expired. (CVE-2006-4924)

Mark Dowd discovered a race condition in the server's signal handling.
A remote attacker could exploit this to crash the server.
(CVE-2006-5051).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two denial of service problems have been found in the OpenSSH server.
The Common Vulnerabilities and Exposures project identifies the following vulnerabilities :

  - CVE-2006-4924     The sshd support for ssh protocol version 1 does not     properly handle duplicate incoming blocks. This could     allow a remote attacker to cause sshd to consume     significant CPU resources leading to a denial of     service.

  - CVE-2006-5051     A signal handler race condition could potentially allow     a remote attacker to crash sshd and could theoretically     lead to the ability to execute arbitrary code.

Several remote vulnerabilities have been discovered in OpenSSH, a free implementation of the Secure Shell protocol, which may lead to denial of service and potentially the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2006-4924     Tavis Ormandy of the Google Security Team discovered a     denial of service vulnerability in the mitigation code     against complexity attacks, which might lead to     increased CPU consumption until a timeout is triggered.
    This is only exploitable if support for SSH protocol     version 1 is enabled.

  - CVE-2006-5051     Mark Dowd discovered that insecure signal handler usage     could potentially lead to execution of arbitrary code     through a double free. The Debian Security Team doesn't     believe the general openssh package without Kerberos     support to be exploitable by this issue. However, due to     the complexity of the underlying code we will issue an     update to rule out all eventualities.

The remote BIG-IP device is missing a patch required by a security advisory.

According to the version of one or more Juniper NSM servers running on the remote host, it is potentially vulnerable to multiple vulnerabilities, the worst of which may allow an authenticated user to trigger a denial of service condition or execute arbitrary code.

From Red Hat Security Advisory 2006:0697 :

Updated openssh packages that fix two security flaws are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This package includes the core files necessary for both the OpenSSH client and server.

Mark Dowd discovered a signal handler race condition in the OpenSSH sshd server. A remote attacker could possibly leverage this flaw to cause a denial of service (crash). (CVE-2006-5051) The OpenSSH project believes the likelihood of successful exploitation leading to arbitrary code execution appears remote. However, the Red Hat Security Response Team have not yet been able to verify this claim due to lack of upstream vulnerability information. We are therefore including a fix for this flaw and have rated it important security severity in the event our continued investigation finds this issue to be exploitable.

Tavis Ormandy of the Google Security Team discovered a denial of service bug in the OpenSSH sshd server. A remote attacker can send a specially crafted SSH-1 request to the server causing sshd to consume a large quantity of CPU resources. (CVE-2006-4924)

All users of openssh should upgrade to these updated packages, which contain backported patches that resolves these issues.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0470 advisory.

    This advisory aggregates security fixes for the openssh SRPM in CIQ LTS 9.2. It addresses 21 CVEs:
    CVE-2006-4924, CVE-2023-51385, CVE-2016-6210, CVE-2016-1908, CVE-2023-48795, and 16 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
301236	NewStart CGSL MAIN 6.06 (SP) : openssh Multiple Vulnerabilities (NS-SA-2026-0003)	Nessus	NewStart CGSL Local Security Checks	2026/3/6	2026/3/6	critical
22474	RHEL 2.1 : openssh (RHSA-2006:0698)	Nessus	Red Hat Local Security Checks	2006/9/29	2021/1/14	high
29538	SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 2184)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	high
356390	Rocky Linux 9.6 [CIQ] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ciqsa-2026_1419)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
127206	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2024/5/8	high
107389	Solaris 10 (sparc) : 123324-03	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	medium
22485	CentOS 3 / 4 : openssh / openssl (CESA-2006:0697)	Nessus	CentOS Local Security Checks	2006/10/2	2021/1/4	high
27935	Ubuntu 5.04 / 5.10 / 6.06 LTS : openssh vulnerabilities (USN-355-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	high
23661	Debian DSA-1212-1 : openssh - Denial of service	Nessus	Debian Local Security Checks	2006/11/20	2021/1/4	high
22731	Debian DSA-1189-1 : openssh-krb5 - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	high
88441	F5 Networks BIG-IP : OpenSSH vulnerabilities (SOL6736)	Nessus	F5 Networks Local Security Checks	2016/1/28	2021/1/11	high
69872	Juniper NSM Servers < 2012.1 Multiple Vulnerabilities	Nessus	Misc.	2013/9/13	2022/4/11	high
67412	Oracle Linux 4 : openssh (ELSA-2006-0697)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
354271	Rocky Linux 9.2 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0470)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical

检测

插件搜索

critical

high

high

critical

high

medium

high

high

high

high

high

high

high

critical