CVE-2008-2573 Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.
HighCVSS 8.5
EPSS 5.6%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freesshd | = 1.2.1 | No fix listed |
References
- 30498 third-party-advisory vendor-advisory
- 20080606 FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit mailing-list
- 29453 exploit vdb-entry
- 1020212 vdb-entry
- ADV-2008-1711 vdb-entry
- 5709 exploit
- 5751 exploit