CVE-2008-6899 Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (...
HighCVSS 9.0
EPSS 5.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freesshd | = 1.2.1 | No fix listed |
References
- www.bmgsec.com.au exploit
- 20081222 FreeSSHd Multiple Remote Stack Overflow Vulnerabilities mailing-list
- 32972 exploit vdb-entry
- freesshd-open-bo(52434) vdb-entry