CVE-2008-0852

EUVD-2008-0859
freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which triggers a NULL pointer dereference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
freesshdfreesshd
𝑥
≤ 1.2
𝑥
= Vulnerable software versions
References
http://aluigi.altervista.org/adv/freesshdnull-adv.txt
http://secunia.com/advisories/29002
http://www.securityfocus.com/archive/1/488363/100/0/threaded
http://www.securityfocus.com/bid/27845
http://www.vupen.com/english/advisories/2008/0591
http://aluigi.altervista.org/adv/freesshdnull-adv.txt
http://secunia.com/advisories/29002
http://www.securityfocus.com/archive/1/488363/100/0/threaded
http://www.securityfocus.com/bid/27845
http://www.vupen.com/english/advisories/2008/0591