Some vulnerabilities have been reported in Iconfidant SSH, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error when processing SSH login packets can be exploited to cause a DoS via e.g. flooding the vulnerable system with a large amount of packets.

2) An error when processing SSH login packets while other management actions are being performed can be exploited to cause a DoS.

3) An error when processing SSH login packets can be exploited to cause a DoS via a specially crafted packet containing invalid authentication credentials.

The vulnerabilities are reported in versions prior to 2.3.8.

Solution
Update to version 2.3.8 (see vendor's advisory for more information).

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Icon Labs:
http://www.icon-labs.com/news/read.asp?newsID=77

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers