• info
• discussion
• exploit
• solution
• references

freeSSHd SSH2 Connection Data Remote Buffer Overflow Vulnerability

freeSSHd is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial of service.

freeSSHd 1.2.4 is vulnerable; other versions may also be affected.