CVEs-PoC/2006/CVE-2006-4925.md

CVE-2006-4925

Description

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.

POC

Reference

• http://bugs.gentoo.org/show_bug.cgi?id=148228
• http://bugs.gentoo.org/show_bug.cgi?id=148228

Github

• https://github.com/phx/cvescan