CVE-2019-25607
HIGHAxessh 4.2 Local Stack-based Buffer Overflow via Log File Name
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2019-25607. PoCs published by Uday Mittal, Victor Mondragón.
AI-analyzed exploit summary This exploit demonstrates a local stack-based buffer overflow in Axessh 4.2 by crafting a malicious log file name that triggers arbitrary code execution via a reverse TCP meterpreter shell. The payload leverages a known return address in ctl3d32.dll to bypass protections and execute shellcode.
Description
Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute shellcode with system privileges.
Exploits (2)
This exploit demonstrates a local stack-based buffer overflow in Axessh 4.2 by crafting a malicious log file name that triggers arbitrary code execution via a reverse TCP meterpreter shell. The payload leverages a known return address in ctl3d32.dll to bypass protections and execute shellcode.
This PoC exploits a buffer overflow vulnerability in Axessh 4.2 by writing a 500-byte string of 'A' characters to a file, which when pasted into the 'Log file name' field causes a denial of service (crash). The exploit is straightforward and demonstrates the vulnerability effectively.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H