CVE-2008-0132: Medium severity pragma systems fortressssh vulnerability
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0132?
CVE-2008-0132 has a medium severity rating due to its potential to cause a denial of service.
How do I fix CVE-2008-0132?
To fix CVE-2008-0132, upgrade to a version of FortressSSH later than 5.0 Build 4 Revision 293.
What does CVE-2008-0132 affect?
CVE-2008-0132 specifically affects versions 5.0 Build 4 Revision 293 and earlier of Pragma Systems FortressSSH.
What is the impact of CVE-2008-0132 on system availability?
The impact of CVE-2008-0132 on system availability is that it can lead to a denial of service by crashing the sshd.exe process.
Can CVE-2008-0132 be exploited remotely?
Yes, CVE-2008-0132 can be exploited remotely by sending long input to the sshd.exe service.