- CVE-2006-5051: Fix an unsafe signal hander reported by Mark Dowd. The

    signal handler was vulnerable to a race condition that could be
    exploited to perform a pre-authentication denial of service. On
    portable OpenSSH, this vulnerability could theoretically lead to
    pre-authentication remote code execution if GSSAPI authentication is
    enabled, but the likelihood of successful exploitation appears remote.

1 files changed, 1 insertions, 0 deletions

diff --git a/auth.h b/auth.h
index 267e7b022..e76cf871a 100644
--- a/auth.h
+++ b/auth.h
@@ -49,6 +49,7 @@ typedef struct KbdintDevice KbdintDevice;
 
 struct Authctxt {
         int              success;
+        int              authenticated; /* authenticated and alarms cancelled */
         int              postponed;     /* authentication needs another step */
         int              valid;         /* user exists and is allowed to login */
         int              attempt;