This script is Copyright (C) 2011 Tenable Network Security, Inc.
The SSH server running on the remote host has a denial of service
According to its banner, the version of OpenSSH running on the remote
host is affected by a remote denial of service vulnerability. When
used with OpenPAM, OpenSSH does not properly handle when a forked
child process ends during PAM authentication. This could allow a
remote attacker to cause a denial of service by connecting several
times to the SSH server, waiting for the password prompt and then
See also :
Upgrade to OpenSSH 3.8.1p1 or later.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.1
Public Exploit Available : true