CVE-2008-2573

This exploit targets a remote SEH overflow vulnerability in FreeSSHD 1.2.1, leveraging a post-authentication buffer overflow to execute arbitrary shellcode. It includes target-specific payloads for Windows XP SP2 and Vista, using a combination of NOPs, shellcode, and precise offsets to achieve reliable exploitation.

This exploit demonstrates a remote buffer overflow in FreeSSHD 1.2.1 by sending an overly long payload (4098 'A's) during an SFTP directory listing operation. The PoC uses Net::SSH2 to authenticate and trigger the vulnerability, causing a crash (EIP overwrite with 0x41414141).