PT-2006-3382 · Pragma · Fortressssh

Publicado 2006-05-17 · Atualizado 2017-07-20 · CVE-2006-2421

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pragma FortressSSH version 4.0.7.20

Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via long SSH MSG KEXINIT messages, which may cause an overflow when being logged.

Recommendations For Pragma FortressSSH version 4.0.7.20, consider restricting access to the SSH service until a patch is available. As a temporary workaround, limit the length of SSH MSG KEXINIT messages to prevent potential overflows. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-2421

Produtos afetados

Fortressssh

Referências · 5

• http://securityfocus.com/bid/17991 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2421 · Nota de Segurança
• http://secunia.com/advisories/20114 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26498 · Nota
• http://vupen.com/english/advisories/2006/1820 · Nota