CVE-2012-10060 Sysax Multi Server < 5.55 SSH Username Buffer Overflow
CriticalCVSS 9.3
EPSS 4.7%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Sysax Software Multi Server | < 5.55 | 5.55 |
| sysax multi server | < 5.55 | 5.55 |
References
- raw.githubusercontent.com exploit third-party-advisory
- www.exploit-db.com exploit vdb-entry
- www.exploit-db.com exploit vdb-entry
- web.archive.org exploit technical-description third-party-advisory
- advisories.checkpoint.com third-party-advisory
- www.sysax.com product
- www.vulncheck.com third-party-advisory