CVE-2008-4762
freeSSHd 1.2.1 - Authenticated Stack-Based Buffer Overflow via Long Argument to Rename or Realpath Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4762. PoCs published by Jeremy Brown.
AI-analyzed exploit summary This exploit targets a denial-of-service (DoS) vulnerability in FreeSSH 1.2.1 by sending an overly long string (550,000 'A' characters) via an SFTP rename operation, causing the server to crash. It requires valid SSH credentials to authenticate before triggering the crash.
Description
Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) rename and (2) realpath parameters.
Exploits (2)
This exploit targets a denial-of-service (DoS) vulnerability in FreeSSH 1.2.1 by sending an overly long string (550,000 'A' characters) via an SFTP rename operation, causing the server to crash. It requires valid SSH credentials to authenticate before triggering the crash.
This exploit triggers a denial-of-service (DoS) condition in FreeSSH 1.2.1 by sending an overly long string (262145 'A' characters) via the SFTP realpath function. The crash is a result of a buffer overflow vulnerability.