CVE-2008-0132
Pragma FortressSSH < 5.0 - Denial of Service via Long SSH Input
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0132. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The exploit describes a remote denial-of-service vulnerability in Pragma Systems FortressSSH 5.0 due to improper handling of overly long user-supplied input, leading to connection exhaustion. No actual exploit code is provided, only a description and reference link.
Description
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.
Exploits (1)
The exploit describes a remote denial-of-service vulnerability in Pragma Systems FortressSSH 5.0 due to improper handling of overly long user-supplied input, leading to connection exhaustion. No actual exploit code is provided, only a description and reference link.