xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

BitVise WinSSHD处理连接存在漏洞


发布时间:2002-03-21
更新时间:2002-03-21
严重程度:
威胁程度:远程拒绝服务
错误类型:意外情况处置错误
利用方式:服务器模式

BUGTRAQ ID:4300

受影响系统
BitVise WinSSHD 1.1
   - Microsoft Windows 2000 Advanced Server 0.0
   - Microsoft Windows 2000 Advanced Server 0.0SP1
   - Microsoft Windows 2000 Advanced Server 0.0SP2
   - Microsoft Windows 2000 Datacenter Server 0.0
   - Microsoft Windows 2000 Datacenter Server 0.0SP1
   - Microsoft Windows 2000 Datacenter Server 0.0SP2
   - Microsoft Windows 2000 Professional 0.0
   - Microsoft Windows 2000 Professional 0.0SP1
   - Microsoft Windows 2000 Professional 0.0SP2
   - Microsoft Windows 2000 Server 0.0
   - Microsoft Windows 2000 Server 0.0SP1
   - Microsoft Windows 2000 Server 0.0SP2
   - Microsoft Windows 2000 Terminal Services 0.0
   - Microsoft Windows 2000 Terminal Services 0.0SP1
   - Microsoft Windows 2000 Terminal Services 0.0SP2
   - Microsoft Windows NT Enterprise Server 4.0
   - Microsoft Windows NT Enterprise Server 4.0SP1
   - Microsoft Windows NT Enterprise Server 4.0SP2
   - Microsoft Windows NT Enterprise Server 4.0SP3
   - Microsoft Windows NT Enterprise Server 4.0SP4
   - Microsoft Windows NT Enterprise Server 4.0SP5
   - Microsoft Windows NT Enterprise Server 4.0SP6
   - Microsoft Windows NT Enterprise Server 4.0SP6a
   - Microsoft Windows NT Server 4.0
   - Microsoft Windows NT Server 4.0SP1
   - Microsoft Windows NT Server 4.0SP2
   - Microsoft Windows NT Server 4.0SP3
   - Microsoft Windows NT Server 4.0SP4
   - Microsoft Windows NT Server 4.0SP5
   - Microsoft Windows NT Server 4.0SP6
   - Microsoft Windows NT Server 4.0SP6a
   - Microsoft Windows NT Terminal Server 4.0
   - Microsoft Windows NT Terminal Server 4.0SP1
   - Microsoft Windows NT Terminal Server 4.0SP2
   - Microsoft Windows NT Terminal Server 4.0SP3
   - Microsoft Windows NT Terminal Server 4.0SP4
   - Microsoft Windows NT Terminal Server 4.0SP5
   - Microsoft Windows NT Terminal Server 4.0SP6
   - Microsoft Windows NT Terminal Server 4.0SP6a
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6
   - Microsoft Windows NT Workstation 4.0SP6a
   - Microsoft Windows XP Home 0.0
   - Microsoft Windows XP Professional 0.0
详细描述
BitVise WinSSHD是WINDOWS下的SSHD实现,由于对大量的不安全的连接处理才在漏洞,可以导致攻击者进行拒绝服务攻击。

测试代码
尚无

解决方案
请在如下地址下载最新升级程序:

http://www.bitvise.com/existing-users.html

相关信息
support@securiteam.com
相关主页:http://www.bitvise.com/