CVE-2006-0353

unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...

Design/Logic Flaw

unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...

CVE-2006-0353

unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...

CVE-2006-0353

CVE-2006-0353 affects lsh 2.0.1’s lshd, which leaks file descriptors related to the randomness generator. A local attacker can truncate the seed file, potentially preventing lshd from starting or enabling seed/key disclosure. Debian’s DSA-956-1 and related advisories describe a local vulnerabilit...

CVE-2005-0814

Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2005-0814

Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors...

Debian DSA-717-1 : lsh-utils - buffer overflow, typo

Several security relevant problems have been discovered in lsh, the alternative secure shell v2 SSH2 protocol server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2003-0826 Bennett Todd discovered a heap buffer overflow in lshd which could lead...

[SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 717-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 717-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...

DSA-717-1 lsh-utils - buffer overflow, typo

Bulletin has no description...

CVE-2005-0814

CVE-2005-0814 affects Lysator LSH server components (lshd) in LSH 1.x and 2.x up to version 2.0.1. The vulnerability is described as an unknown DoS condition that can be triggered remotely, with vectors not detailed in the provided documents. Connected sources corroborate the affected software an...

CVE-2005-0814

Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2005-0814

Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors...

[SA14609] LSH lshd Unspecified Denial of Service Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: LSH lshd Unspecified Denial of Service Vulnerability...

LSH lshd secure shell server DoS

No description provided...

LSH lshd parse_kexinit() Function Malformed Key Exchange Message Remote DoS

The remote host is running Lysator's LSH, a version of Secure Shell SSH that is available for Unix-like platforms. This version of LSH is reportedly vulnerable to a denial of service attack. An attacker can exploit this issue by sending a malformed key exchange message. C Tenable Network Security...

lsh -- multiple vulnerabilities

Secunia reports: A vulnerability has been reported in LSH, which potentially can be exploited by malicious people to cause a DoS Denial of Service...

LSH < 1.5 lshd Daemon Remote Overflow

Binary data 1995.prm...

SUSE-SA:2003:041: lsh

The remote host is missing the patch for the advisory SUSE-SA:2003:041 lsh. LSH is the GNU implementation of SSH and can be seen as an alternative to OpenSSH. Recently various remotely exploitable buffer overflows have been reported in LSH. These allow attackers to execute arbitrary code as root ...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...