Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

William M. Grim

#52077of 56,333
5Total CVSS
Vulnerabilities · 1
PT-2006-1929
5.0
2006-03-07
Freebsd · Openam · CVE-2006-0883
**Name of the Vulnerable Software and Affected Versions** OpenSSH on FreeBSD versions 5.3 through 5.4 **Description** The issue arises when OpenSSH on FreeBSD is used with OpenPAM and a forked child process terminates during PAM authentication. This allows remote attackers to cause a denial of service by connecting multiple times to the SSH server, waiting for the password prompt, and then disconnecting. **Recommendations** For OpenSSH on FreeBSD versions 5.3 through 5.4, consider restricting access to the SSH server or implementing measures to limit the number of concurrent connections as a temporary workaround until a patch is available.