SSF Server Detection

Binary data 4422.prm...

NULL pointer crash in freeSSHd 1.20

Luigi Auriemma Application: freeSSHd http://www.freesshd.com Note: is possible that the problem affects also wodSSHServer anyway this has not been tested Versions: = 1.2.0 Platforms: Windows Bug: NULL pointer crash Exploitation: remote Date: 17 Feb 2008 Author: Luigi Auriemma e-mail:...

WS_FTP Server < 6.1.1 Multiple Vulnerabilities

Binary data 4361.prm...

Pragma FortressSSH SSH server DoS

Multiple user-reachable assert's...

Exception message in VanDyke VShell 3.0.3.569

Luigi Auriemma Application: VanDyke VShell http://www.vandyke.com/products/vshell/index.html Versions: = 3.0.3.569 Platforms: Windows mainly affected, anyway the server works also on Linux, Solaris, FreeBSD, Mac OS X, HP-UX and AIX Bug: exception error message or termination if in debug mode...

Georgia SoftWorks SSH server multiple security vulnerabilities

Format string vulnerabilities and buffer overflows...

GLSA-200710-14 : DenyHosts: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200710-14 DenyHosts: Denial of Service Daniel B. Cid discovered that DenyHosts used an incomplete regular expression to parse failed login attempts, a different issue than GLSA 200701-01. Impact : A remote unauthenticated attacker...

CVE-2007-1063

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

CVE-2007-1063: Use of Hard-coded Credentials

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

SSH Tectia Windows特定路径特权提升漏洞

SSH Tectia基于SSH技术，集中管理情况下提供 安全的系统管理，安全的文件传输，安全的程序之间的连接。 Windows版本下的SSH Tectia产品在子进程执行中处理路径名存在漏洞，本地攻击者可以利用漏洞提升特权。 如果本地用户允许建立系统盘ROOT目录中或者"Program Files"文件夹或其子目录中建立文件，就可能放置恶意程序代替正确的SSH Tectia子组件，结果导致以高权限执行任意程序。 SSH Communications Security Tectia Server 5.0.1 SSH Communications Security Tectia Server...

FortressSSH SSH_MSG_KEXINIT Logging Remote Overflow

The remote host is running FortressSSH, an enterprise-class SSH server for Windows. According to its banner, the installed version of this software reportedly contains a buffer overflow vulnerability involving a boundary error in the logging of contents of 'SSHMSGKEXINIT' messages. An...

freeSSHd Key Exchange Algorithm String Remote Overflow

The remote host is using freeSSHd, a free SSH server for Windows. The version of freeSSHd installed on the remote host does not validate the key exchange strings sent by a SSH client. This can result in a buffer overflow and possibly a compromise of the host if an unauthenticated attacker sends a...

FreeSSHd key exchange buffer overflow

Added: 05/17/2006 CVE: CVE-2006-2407 BID: 17958 OSVDB: 25463 Background freeSSHd is a free SSH server based on WeOnlyDo wodSSHServer. Problem wodSSHServer and its derivatives, including freeSSHd, are affected by a buffer overflow vulnerability in the key exchange algorithm. A remote attacker can...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

CVE-2006-1206

CVE-2006-1206 affects Dropbear SSH server 0.47 and earlier. The issue allows remote attackers to cause a denial of service by exhausting connection slots (MAX_UNAUTH_CLIENTS = 30) with a high rate of connection attempts. Impact is partial availability. Documented in multiple sources (NVD SUSE OSV...

CVE-2006-1206

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

CVE-2006-1206: Undefined Security Weakness

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...

Dropbear SSH Authorization-pending Connection Saturation DoS

The remote host is running Dropbear, a small, open source SSH server. The version of Dropbear installed on the remote host, by default, has a limit of 30 connections in the authorization-pending state; subsequent connections are closed immediately. This issue can be exploited trivially by an...