CVE-2004-2069: openbsd openssh

EPSS trend

Probability

3.37%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.37% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

33 links

support.avaya.com/elmodocs2/security/ASA-2005-216.pdfX Refsource CONFIRM
www.vmware.com/support/vi3/doc/esx-3069097-patch.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2006/4502VDB EntryX Refsource VUPEN
marc.info?l=openssh-unix-dev&m=107520317020444&w=2Mailing ListX Refsource MLIST
www.osvdb.org/16567VDB EntryX Refsource OSVDB
secunia.com/advisories/22875Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23680Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/20930VDB EntryX Refsource XF
www.vmware.com/download/esx/esx-202-200610-patch.htmlX Refsource CONFIRM
www.securityfocus.com/archive/1/451426/100/200/threadedMailing ListX Refsource BUGTRAQ

Show all 33 references

www.securityfocus.com/archive/1/425397/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.vmware.com/download/esx/esx-213-200610-patch.htmlX Refsource CONFIRM
marc.info?l=openssh-unix-dev&m=107529205602320&w=2Mailing ListX Refsource MLIST
support.avaya.com/elmodocs2/security/ASA-2005-223.pdfX Refsource CONFIRM
secunia.com/advisories/17000Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/14963VDB EntryX Refsource BID
secunia.com/advisories/17252Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17135Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/451404/100/0/threadedMailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541VDB EntrySignatureX Refsource OVAL
rhn.redhat.com/errata/RHSA-2005-550.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/451417/100/200/threadedMailing ListX Refsource BUGTRAQ
www.vmware.com/support/vi3/doc/esx-9986131-patch.htmlX Refsource CONFIRM
access.redhat.com/errata/RHSA-2005:550Advisory
bugzilla.redhat.com/show_bug.cgi?id=129289REPORT
bugzilla.redhat.com/show_bug.cgi?id=151080REPORT
bugzilla.redhat.com/show_bug.cgi?id=156996REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_550.jsonAdvisory
access.redhat.com/security/cve/CVE-2004-2069REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617421REPORT
www.cve.org/CVERecord?id=CVE-2004-2069Advisory
nvd.nist.gov/vuln/detail/CVE-2004-2069Advisory
security-tracker.debian.org/tracker/CVE-2004-2069Advisory

Related vulnerabilities

CVE-2018-15919debianopenssh+83.56%8y ago28-08-2018 08:00Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'CVE-2018-15473alpineopenssh+7598.63%8y ago17-08-2018 00:00OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.CVE-2003-1562debianopenssh+15.57%18y ago04-08-2008 10:00sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.CVE-2003-0693debianopenssh+111.42%23y ago17-09-2003 04:00A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.CVE-2003-0695debianopenssh+13.79%23y ago18-09-2003 04:00Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.CVE-2003-0682debianopenssh+18.79%23y ago18-09-2003 04:00"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

All vulnerabilities inopenssh

CVE-2004-2069: openbsd openssh

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References