Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH glob表达式拒绝服务漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 在FreeBSD 7.3和8.1版本，NetBSD 5.0.2版本，和OpenBSD 4.7版本，及其他产品中使用的OpenSSH 5.8及之前版本的（1）sftp-glob.c中的remote_glob函数和（2）sftp.c中的process_put函数中存在漏洞。远程认证用
CVSS Information
N/A
Vulnerability Type
N/A