Vulnerability CVE-2006-0353
Published: 2006-01-22   Modified: 2012-02-12

Description:
unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys.

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.6/10
4.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
Partial
Affected software
GNU -> LSH 

 References:
http://lists.lysator.liu.se/pipermail/lsh-bugs/2006q1/000467.html
http://www.debian.org/security/2006/dsa-956
http://www.securityfocus.com/bid/16357
http://www.vupen.com/english/advisories/2006/0301
https://exchange.xforce.ibmcloud.com/vulnerabilities/24263
Copyright 2024, cxsecurity.com

 

Back to Top