Описание
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
Ссылки
- PatchVendor Advisory
- Vendor Advisory
- Vendor Advisory
- US Government Resource
- Exploit
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:freeftpd:freeftpd:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:freesshd:freesshd:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:weonlydo:wodsshserver:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:weonlydo:wodsshserver:1.3.3_demo:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.79892
Высокий
7.5 High
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
почти 4 года назад
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
EPSS
Процентиль: 99%
0.79892
Высокий
7.5 High
CVSS2
Дефекты
CWE-119