Windows rshd buffer overflow

Added: 08/03/2007
CVE: CVE-2007-4006
BID: 25044
OSVDB: 38572

Background

The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms.

Problem

A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute arbitrary commands.

Resolution

Disable the rshd service, or upgrade to a version higher than 1.8 when available.

References

<http://www.securityfocus.com/bid/25044&gt;

Platforms

Windows NT
Windows 2000
Windows XP SP0
Windows XP SP1
Windows XP SP2 / Windows XP
Windows Server 2003