PT-2007-5812 · Openssh+3 · Openssh+2

Alessandro Fiorenzi + 1 · Published 2007-09-04 · Updated 2018-10-15 · CVE-2007-4654

Mitre

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-4654

Affected Products

Openssh

Sshield

Webns

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4654 · Security Note
• http://securityfocus.com/archive/1/478165/100/0/threaded · Note
• http://securityreason.com/securityalert/3091 · Note
• http://osvdb.org/45873 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44542 · Note