<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pragma systems</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-0153: telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process cra</title><link>https://patchthecve.com/cve/CVE-2008-0153.html</link><guid>https://patchthecve.com/cve/CVE-2008-0153.html</guid><pubDate>Tue, 16 Jun 2026 22:49:02 +0000</pubDate><description>MEDIUM 5.0: telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.</description></item><item><title>CVE-2006-2421: Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code v</title><link>https://patchthecve.com/cve/CVE-2006-2421.html</link><guid>https://patchthecve.com/cve/CVE-2006-2421.html</guid><pubDate>Tue, 16 Jun 2026 22:24:58 +0000</pubDate><description>HIGH 7.5: Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may cause an overflow when being logged.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party inform</description></item><item><title>CVE-2005-1969: Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject </title><link>https://patchthecve.com/cve/CVE-2005-1969.html</link><guid>https://patchthecve.com/cve/CVE-2005-1969.html</guid><pubDate>Tue, 16 Jun 2026 22:14:00 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a &quot;&lt;!--&quot; (HTML comment) in a session.</description></item><item><title>CVE-2002-1360: Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string </title><link>https://patchthecve.com/cve/CVE-2002-1360.html</link><guid>https://patchthecve.com/cve/CVE-2002-1360.html</guid><pubDate>Tue, 16 Jun 2026 21:59:10 +0000</pubDate><description>HIGH 10.0: Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated </description></item><item><title>CVE-2002-1359: Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote</title><link>https://patchthecve.com/cve/CVE-2002-1359.html</link><guid>https://patchthecve.com/cve/CVE-2002-1359.html</guid><pubDate>Tue, 16 Jun 2026 21:59:10 +0000</pubDate><description>HIGH 10.0: Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.</description></item><item><title>CVE-2002-1358: Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow</title><link>https://patchthecve.com/cve/CVE-2002-1358.html</link><guid>https://patchthecve.com/cve/CVE-2002-1358.html</guid><pubDate>Tue, 16 Jun 2026 21:59:10 +0000</pubDate><description>HIGH 10.0: Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.</description></item><item><title>CVE-2002-1357: Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specif</title><link>https://patchthecve.com/cve/CVE-2002-1357.html</link><guid>https://patchthecve.com/cve/CVE-2002-1357.html</guid><pubDate>Tue, 16 Jun 2026 21:59:10 +0000</pubDate><description>HIGH 10.0: Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.</description></item><item><title>CVE-2001-1263: telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) vi</title><link>https://patchthecve.com/cve/CVE-2001-1263.html</link><guid>https://patchthecve.com/cve/CVE-2001-1263.html</guid><pubDate>Tue, 16 Jun 2026 21:55:55 +0000</pubDate><description>MEDIUM 5.0: telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.</description></item><item><title>CVE-2000-0708: Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of s</title><link>https://patchthecve.com/cve/CVE-2000-0708.html</link><guid>https://patchthecve.com/cve/CVE-2000-0708.html</guid><pubDate>Tue, 16 Jun 2026 21:52:18 +0000</pubDate><description>MEDIUM 5.0: Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.</description></item><item><title>CVE-2000-0212: InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal c</title><link>https://patchthecve.com/cve/CVE-2000-0212.html</link><guid>https://patchthecve.com/cve/CVE-2000-0212.html</guid><pubDate>Tue, 16 Jun 2026 21:51:14 +0000</pubDate><description>MEDIUM 5.0: InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.</description></item></channel></rss>