Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities

Bugtraq ID:	29609
Class:	Unknown
CVE:	CVE-2008-0534
Remote:	Yes
Local:	No
Published:	Jun 09 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Icon Labs Iconfidant SSH 2.3.7
Not Vulnerable:	Icon Labs Iconfidant SSH 2.3.8

Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities

Icon Labs Iconfidant SSH server is prone to three vulnerabilities that can cause denial-of-service conditions.

Attackers can leverage these issue to cause instability that may crash affected servers, denying service for legitimate users.

Versions prior to Iconfidant SSH 2.3.8 are vulnerable.

Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities

Solution:
The vendor released Iconfidant SSH 2.3.8 to address these issues. Please see the references for more information.

Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities

References:

• Icon Labs Releases Update of its Iconfidant�?� SSH Development Toolkit for VxWorks (Icon Labs)
  
• Vendor Homepage (Icon Labs)
  
• VU#626979 Icon Labs SSH server vulnerabilities (US-CERT)