Pragma Systems FortressSSH 5.0 'msvcrt.dll' Exception Handling Remote Denial Of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27141/info Pragma Systems FortressSSH is prone to a remote denial-of-service vulnerability because it fails to adequately handle certain exceptions when processing overly long user-supplied input. Attackers can exploit th...

Pragma Systems FortressSSH msvcrt.dll异常处理远程拒绝服务漏洞

BUGTRAQ ID: 27141 FortressSSH是Windows平台上所使用的远程访问和管理工具。 FortressSSH处理客户端请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务。 FortressSSH服务器对每个入站连接启动一个sshd.exe进程，然后使用msvcrt的s函数处理字符串。在这个过程中如果出现了异常的话，进程就会终止，显示消息错误。例如，使用大于4096的密钥列表就会导致在构建格式串期间在vsprintfs中出现异常。尽管终止单个进程不会影响其他进程，但终止某些进程会导致服务器拒绝访问。 Pragma Systems FortressSSH ...

Pragma Systems FortressSSH 5.0 - msvcrt.dll Exception Handling Remote Denial of Service

Pragma Systems FortressSSH 5.0 - msvcrt.dll Exception Handling Remote Denial of Service source: https://www.securityfocus.com/bid/27141/info Pragma Systems FortressSSH is prone to a remote denial-of-service vulnerability because it fails to adequately handle certain exceptions when processing...