CVE-2008-4762 Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) renam...
HighCVSS 9.0
EPSS 14.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) rename and (2) realpath parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freesshd | = 1.2.1 | No fix listed |
References
- 32366 third-party-advisory vendor-advisory
- 4515 third-party-advisory
- 20081022 freeSSHd (stf - rename) Buffer Overflow Vulnerability mailing-list
- 31872 vdb-entry
- 1021096 vdb-entry
- ADV-2008-2897 vdb-entry
- freesshd-rename-realpath-dos(46046) vdb-entry
- 6800 exploit
- 6812 exploit