Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pragma FortressSSH 资源管理错误漏洞
Vulnerability Description
FortressSSH是Windows平台上所使用的远程访问和管理工具。 FortressSSH处理客户端请求数据时存在资源管理错误漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务。 FortressSSH服务器对每个入站连接启动一个sshd.exe进程，然后使用msvcrt的*_s函数处理字符串。在这个过程中如果出现了异常的话，进程就会终止，显示消息错误。例如，使用大于4096的密钥列表就会导致在构建格式串期间在vsprintf_s中出现异常。尽管终止单个进程不会影响其他进程，但终止某些进程会导致服务器
CVSS Information
N/A
Vulnerability Type
N/A