CVE-2008-6393
PSI < 0.12.1 - Remote Denial of Service and Possible Code Execution via SOCKS5 File Transfer Option
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6393. PoCs published by Sha0.
AI-analyzed exploit summary This exploit sends a malformed packet to the Psi Jabber client on port 8010, causing a denial of service (DoS) by crashing the application. It works on both Windows and Linux systems.
Description
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
Exploits (1)
This exploit sends a malformed packet to the Psi Jabber client on port 8010, causing a denial of service (DoS) by crashing the application. It works on both Windows and Linux systems.