William M. Grim

**Name of the Vulnerable Software and Affected Versions** OpenSSH on FreeBSD versions 5.3 through 5.4 **Description** The issue arises when OpenSSH on FreeBSD is used with OpenPAM and a forked child process terminates during PAM authentication. This allows remote attackers to cause a denial of service by connecting multiple times to the SSH server, waiting for the password prompt, and then disconnecting. **Recommendations** For OpenSSH on FreeBSD versions 5.3 through 5.4, consider restricting access to the SSH server or implementing measures to limit the number of concurrent connections as a temporary workaround until a patch is available.