3 ms·
To this point, one of the RFC documents for SSH explicitly calls out the fact that the protocol is vulnerable to denial of service attacks and suggest only allo
by ewindisch 12y ago
To this point, one of the RFC documents for SSH explicitly calls out the fact that the protocol is vulnerable to denial of service attacks and suggest only allowing access from the IP addresses of known users.
Source: http://tools.ietf.org/html/rfc4251#section-9.3.5 http://tools.ietf.org/html/rfc4251#section-9.3.5
- vidarh 12y agoIt's not just that the protocol is vulnerable. With e.g. openssh you can not just deny access to the ssh service, you can max out CPU on the entire machine if you hammer it enough.