VULNERABILITY INTELLIGENCE
CVE-2006-0883
CVSS score5 MEDIUM
EPSS probability1.92%
CISA KEVNot currently listed
Published2006-03-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to cause a denial of service (client connection refusal) by connecting multiple times to the SSH server, waiting for the password prompt, then disconnecting.