Skip to content
Fencer Vulns
low 2.6

CVE-2006-5229 json

OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote att…

published 2006-10-10 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-5214

cvss
2.6
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
58.9%
EPSS 58.9% chance of exploitation in 30 days, percentile 99.1%
public exploits
2
Metasploit, Exploit-DB

Summary

OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime. NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds.

Timeline

  1. Published
  2. First public exploit (EDB-3303)

Exploit prediction

58.94% chance of exploitation in the next 30 days, higher than 99.1% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

CVSS scores

assigned by version score vector
NVD 2.0 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.