CVE-2008-0132

Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.

• CWE-400

• http://aluigi.altervista.org/adv/pragmassh-adv.txtThird Party Advisory
• http://aluigi.org/poc/pragmassh.zipThird Party Advisory
• http://marc.info/?l=bugtraq&m=119947184730448&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/27141Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39354Third Party Advisory, VDB Entry
• http://aluigi.altervista.org/adv/pragmassh-adv.txtThird Party Advisory
• http://aluigi.org/poc/pragmassh.zipThird Party Advisory
• http://marc.info/?l=bugtraq&m=119947184730448&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/27141Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39354Third Party Advisory, VDB Entry

Published

Jan 8, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0125Cross-site scripting (XSS) vulnerability in phpstats.php in …
• CVE-2008-0127The administration interface in McAfee E-Business Server 8.5…
• CVE-2008-0128The SingleSignOn Valve (org.apache.catalina.authenticator.Si…
• CVE-2008-0129SQL injection vulnerability in starnet/addons/slideshow_full…
• CVE-2008-0130SQL injection vulnerability in login_form.asp in Instant Sof…
• CVE-2008-0131Cross-site scripting (XSS) vulnerability in login_form.asp i…
• CVE-2008-0133Multiple SQL injection vulnerabilities in Tribisur 2.1 and e…
• CVE-2008-0134Cross-site scripting (XSS) vulnerability in Forums/setup.asp…
• CVE-2008-0135Snitz Forums 2000 3.4.06 and earlier stores sensitive inform…
• CVE-2008-0136Snitz Forums 2000 3.4.05 allows remote attackers to obtain s…
• CVE-2008-0137PHP remote file inclusion vulnerability in config.inc.php in…
• CVE-2008-0138PHP remote file inclusion vulnerability in xoopsgallery/init…