CVE-2006-0353: unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allow...

Security readout for executives and security teams

CVE-2006-0353 is an old lshd issue where the server may expose randomness-related file handles to local user shells. A local user could disrupt service startup by damaging the seed file, or potentially obtain seed information relevant to key security. The source bundle does not show active exploitation. Exposure is likely limited to legacy systems running lshd/lsh 2.0.1, especially where untrusted local shell users exist. The bundle does not identify broader affected products or supported current releases. Prioritize if lshd is still used on systems with local multi-user access or sensitive SSH-like keys. For most modern environments, urgency depends on whether this obsolete software is present. Mitigation focus: Identify any systems running lshd or lsh 2.0.1.; Review Debian DSA-956 and vendor guidance for fixed packages.; Upgrade or replace unsupported lsh deployments where practical..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.