Lucene search

K
cveMitreCVE-2008-2573
HistoryJun 06, 2008 - 6:32 p.m.

CVE-2008-2573

2008-06-0618:32:00
CWE-119
mitre
web.nvd.nist.gov
25
cve-2008-2573
stack-based buffer overflow
sftp
freesshd 1.2.1
remote code execution
nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.088

Percentile

94.6%

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.

Affected configurations

Nvd
Node
freesshdfreesshdMatch1.2.1
VendorProductVersionCPE
freesshdfreesshd1.2.1cpe:2.3:a:freesshd:freesshd:1.2.1:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.088

Percentile

94.6%

Related for CVE-2008-2573