Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-0353 | First vendor Publication | 2006-01-22 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 3.6 | Attack Range | Local |
| Cvss Impact Score | 4.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0353 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-200 | Information Exposure |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-01-17 | Name : Debian Security Advisory DSA 956-1 (lsh-utils) File : nvt/deb_956_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 22695 | LSH lshd Seed-file File Descriptor Leak LSH contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when LSH spawns a new shell for a user. This will leak file descriptors from the 'lshd' daemon to the new process, potentially allowing the user to obtain keying material from the random number generator seed file. This will result in a loss of confidentiality. In addition, the user could truncate that file, denying the 'lshd' daemon access to keying material, causing a Denial-of-Service condition. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-956.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:21:07 |
|
| 2024-11-28 12:08:15 |
|
| 2021-05-04 12:03:39 |
|
| 2021-04-22 01:04:08 |
|
| 2020-05-23 00:17:21 |
|
| 2017-07-20 09:23:19 |
|
| 2016-06-28 15:35:24 |
|
| 2016-04-26 14:14:31 |
|
| 2014-02-17 10:34:28 |
|
| 2013-05-11 10:47:59 |
|
