Format string

Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...

CVE-2008-0097

CVE-2008-0097 stems from a format string vulnerability in the log function of Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to and including 7.01.0003. The flaw allows remote attackers to execute arbitrary code by providing format string specifiers in the username field, as illustrated by ...

CVE-2008-0096

The CVE-2008-0096 entry concerns Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to 7.01.0003. It describes multiple buffer overflows in the log function that can be triggered by (1) a long username or (2) a long password, allowing remote attackers to execute arbitrary code. The connected so...