CVE-2008-0132: Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to…

PriorityP426medium5CVSS 2.0

AVNACLAuNCNINAP

EXPLOIT

EPSS

9.00%

94.6th percentile

Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
pragmasys	fortress_ssh	< 5.0	5.0
pragmasys	fortress_ssh	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.