CVE-2007-4654 in SSHield

Riassunto

di MITRE

Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 04/09/2007
• Divulgazione: 04/09/2007
• Moderazione: accettato
• Voce: VDB-38622
• CPE: pronto
• CWE: CWE-399 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01958
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4654
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4654
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4654/