EUVD-2013-0722

Malware in sbrugna...

CVE-2013-0712

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

CVE-2013-0713

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

CVE-2013-0711

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

CVE-2013-0714

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

Code injection

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

CVE-2013-0711

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

CVE-2013-0714

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

CVE-2013-0713

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

CVE-2013-0713

CVE-2013-0713 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted pty request can cause SSH access to be unavailable until next reboot; authenticated users may trigger this DoS. Public details confirm affected versions and the root cause (pty handling). Mitigation: apply Wind River p...

CVE-2013-0712

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

CVE-2013-0711

CVE-2013-0711 affects Wind River VxWorks 6.5–6.9: IPSSH (SSH server) denial of service via crafted authentication requests caused SSH access to be unavailable until the next reboot. Root cause is improper input handling in authentication processing. Connected documents confirm related vulnerabili...

CVE-2013-0714

CVE-2013-0714 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted public-key authentication request can cause the SSH server to hang and make SSH access unavailable until the next reboot; the vulnerability may also enable arbitrary code execution on the server. The issue is reported ...

CVE-2013-0712

CVE-2013-0712 affects Wind River VxWorks IPSSH (SSH server) in versions 6.5–6.9. The DoS condition arises from a vulnerability in processing immediately after an SSH connection is established, allowing remote authenticated users to cause a denial of service (daemon outage) via a crafted packet. I...

CVE-2013-0711: Improper Input Validation

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

CVE-2013-0713: Improper Input Validation

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

CVE-2013-0712: Improper Input Validation

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

PT-2013-2552

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a daemon hang, via a crafted public-key authentication request in the IPSSH server...