CVE-2006-0883: Freebsd

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to cause a denial of service (client connection refusal) by connecting multiple times to the SSH server, waiting for the password prompt, then disconnecting.

Affected products

  • Freebsd Freebsd: version 5.3 only; version 5.4 only
  • OpenBSD OpenSSH: version 3.8.1p1 only

Published 2006-03-07. Last modified 2026-06-16.