|
|
| |
|
| |
openssh: denial of service
| Package(s): | openssh |
CVE #(s): | CVE-2008-4109
|
| Created: | September 17, 2008 |
Updated: | October 7, 2008 |
| Description: |
From the Debian advisory:
It has been discovered that the signal handler implementing the login
timeout in Debian's version of the OpenSSH server uses functions which
are not async-signal-safe, leading to a denial of service
vulnerability (CVE-2008-4109).
The problem was originally corrected in OpenSSH 4.4p1 (CVE-2006-5051),
but the patch backported to the version released with etch was
incorrect.
|
| Alerts: |
|
( Log in to post comments)
|
|
|