{"id":"CVE-2004-2069","state":"PUBLISHED","title":"sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been term","description":"sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).","publishedAt":"2005-05-05T04:00:00.000Z","updatedAt":"2024-08-08T01:15:01.224Z","severity":null,"assigner":"redhat","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf","http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","http://www.vupen.com/english/advisories/2006/4502","http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2","http://www.osvdb.org/16567","http://secunia.com/advisories/22875","http://secunia.com/advisories/23680","https://exchange.xforce.ibmcloud.com/vulnerabilities/20930","http://www.vmware.com/download/esx/esx-202-200610-patch.html","http://www.securityfocus.com/archive/1/451426/100/200/threaded","http://www.securityfocus.com/archive/1/425397/100/0/threaded","http://www.vmware.com/download/esx/esx-213-200610-patch.html","http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2","http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf","http://secunia.com/advisories/17000","http://www.securityfocus.com/bid/14963","http://secunia.com/advisories/17252","http://secunia.com/advisories/17135","http://www.securityfocus.com/archive/1/451404/100/0/threaded","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541","http://rhn.redhat.com/errata/RHSA-2005-550.html","http://www.securityfocus.com/archive/1/451417/100/200/threaded","http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:06.149Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2004/2xxx/CVE-2004-2069.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2004-2069","state":"PUBLISHED","datePublished":"2005-05-05T04:00:00.000Z","dateUpdated":"2024-08-08T01:15:01.224Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2005-05-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2006/4502","name":"ADV-2006-4502","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2","name":"[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.osvdb.org/16567","name":"16567","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://secunia.com/advisories/22875","name":"22875","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/23680","name":"23680","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930","name":"openssh-sshdc-logingracetime-dos(20930)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","name":"20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded","name":"FLSA-2006:168935","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2","name":"[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/17000","name":"17000","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/14963","name":"14963","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/17252","name":"17252","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/17135","name":"17135","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","name":"20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541","name":"oval:org.mitre.oval:def:11541","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html","name":"RHSA-2005:550","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","name":"20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"datePublic":"2004-01-27T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/4502","name":"ADV-2006-4502","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2","name":"[openssh-unix-dev] 20040127 OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.osvdb.org/16567","name":"16567","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/22875","name":"22875","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23680","name":"23680","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930","name":"openssh-sshdc-logingracetime-dos(20930)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","name":"20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded","name":"FLSA-2006:168935","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2","name":"[openssh-unix-dev] 20040128 Re: OpenSSH - Connection problem when LoginGraceTime exceeds time","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/17000","name":"17000","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/14963","name":"14963","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/17252","name":"17252","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/17135","name":"17135","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","name":"20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541","name":"oval:org.mitre.oval:def:11541","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html","name":"RHSA-2005:550","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","name":"20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T01:15:01.224Z"}}]}}}