GoodTech SSH Server SFTP buffer overflow

Added: 11/28/2008
CVE: CVE-2008-4726
BID: 31879
OSVDB: 49249

Background

GoodTech SSH Server is an SSH Server providing secure remote console, secure file transfer, and secure port forwarding capabilities for Windows platforms.

Problem

Buffer overflow vulnerabilities in GoodTech SSH Server allow remote, authenticated attackers to execute arbitrary commands by sending specially crafted arguments to SFTP commands.

Resolution

Restrict access to trusted users only.

References

<http://secunia.com/advisories/32375/&gt;

Limitations

Exploit works on GoodTech SSH Server 6.4 and requires a valid SSH login and password.

This exploit requires the **sftp** command to be present on the SAINTexploit host.

The PERL module IO::Pty is required to execute this exploit.

Platforms

Windows 2000
Windows Server 2003