CVE-2008-2573

2008-06-0618:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.

References

secunia.com/advisories/30498

www.securityfocus.com/archive/1/493180/100/0/threaded

www.securityfocus.com/bid/29453

www.securitytracker.com/id?1020212

www.vupen.com/english/advisories/2008/1711/references

www.exploit-db.com/exploits/5709

www.exploit-db.com/exploits/5751