CVE-2004-2069

CVE-2004-2069 describes a denial-of-service vulnerability in OpenSSH versions 3.6.1p2 and 3.7.1p2, and potentially others, specifically when privilege separation is enabled. The flaw occurs because the non-privileged process is not correctly signaled when a session exceeds the LoginGraceTime, leaving the connection open and allowing remote attackers to consume available connections. With a CVSS score of 5.0, this vulnerability has a low attack complexity and requires no authentication, leading to a partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.