CVE-2008-6899

Freesshd - Memory Corruption

Title source: rule

Description

Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r0ut3r · perlremotewindows

https://www.exploit-db.com/exploits/8295

View Code ZIP pw:eip

References (4)

[Exploit] http://www.bmgsec.com.au/advisories/freeSSHd-bof.txt

[Exploit] http://www.securityfocus.com/bid/32972

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/52434

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/499486/100/0/threaded

Scores

EPSS 0.1128

EPSS Percentile 93.6%

Details

CWE

CWE-119

Status published

Products (1)

freesshd/freesshd 1.2.1

Published Aug 05, 2009

Tracked Since Feb 18, 2026