CVE-2006-5052: OpenBSD OpenSSH

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."

Affected products

• OpenBSD OpenSSH: version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.27 only; version 2.1 only; …

Published 2006-09-27. Last modified 2026-06-16.