freesshd records
11 published records for vendor freesshd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 2 · 18.2%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-428 Unquoted Search Path or Element2
- CWE-269 Improper Privilege Management1
- CWE-287 Improper Authentication1
- CWE-404 Improper Resource Shutdown or Release1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2006-2407Weaponized | Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Freweonlydo · wodsshserver · CWE-119 | High7.5 | — | 71.3% | May 16, 2006 |
49Plan | CVE-2012-6066Weaponized | freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSHfreesshd · freesshd · CWE-287 | Critical9.3 | — | 39.5% | Dec 4, 2012 |
40Plan | CVE-2008-4762Proof of concept | Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentiallyfreesshd · freesshd · CWE-119 | Critical9.0 | — | 14.4% | Oct 27, 2008 |
39Monitor | CVE-2018-9853No exploit | Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the abfreesshd · freesshd · CWE-269 | Critical9.8 | — | 1.2% | Jul 10, 2018 |
38Monitor | CVE-2008-6899Proof of concept | Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary codefreesshd · freesshd · CWE-119 | Critical9.0 | — | 5.2% | Aug 5, 2009 |
36Monitor | CVE-2008-2573Proof of concept | Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name freesshd · freesshd · CWE-119 | High8.5 | — | 5.6% | Jun 6, 2008 |
31Monitor | CVE-2024-0723Proof of concept | freeSSHd denial of servicefreesshd · freesshd · CWE-404 | High7.5 | — | 3.6% | Jan 19, 2024 |
31Monitor | CVE-2017-1000475Proof of concept | FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.freesshd · freesshd · CWE-428 | High7.8 | — | 0.6% | Jan 24, 2018 |
31Monitor | CVE-2022-27052No exploit | FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevatedfreesshd · freeftpd · CWE-428 | High7.8 | — | 0.3% | Mar 31, 2022 |
22Monitor | CVE-2008-0852Proof of concept | freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which trfreesshd · freesshd | Medium5.0 | — | 6.2% | Feb 20, 2008 |
20Monitor | CVE-2009-3340No exploit | Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a cfreesshd · freesshd | Medium5.0 | — | 1.3% | Sep 24, 2009 |
- CVE-2006-240751Plan
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Fre
HighCVSS 7.5WeaponizedEPSS 71%weonlydo · wodsshserverMay 16, 2006
- CVE-2012-606649Plan
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH
CriticalCVSS 9.3WeaponizedEPSS 39%freesshd · freesshdDec 4, 2012
- CVE-2008-476240Plan
Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially
CriticalCVSS 9.0Proof of conceptEPSS 14%freesshd · freesshdOct 27, 2008
- CVE-2018-985339Monitor
Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ab
CriticalCVSS 9.8No exploitEPSS 1%freesshd · freesshdJul 10, 2018
- CVE-2008-689938Monitor
Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code
CriticalCVSS 9.0Proof of conceptEPSS 5%freesshd · freesshdAug 5, 2009
- CVE-2008-257336Monitor
Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name
HighCVSS 8.5Proof of conceptEPSS 5%freesshd · freesshdJun 6, 2008
- CVE-2024-072331Monitor
freeSSHd denial of service
HighCVSS 7.5Proof of conceptEPSS 3%freesshd · freesshdJan 19, 2024
- CVE-2017-100047531Monitor
FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.
HighCVSS 7.8Proof of conceptEPSS 0%freesshd · freesshdJan 24, 2018
- CVE-2022-2705231Monitor
FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated
HighCVSS 7.8No exploitEPSS 0%freesshd · freeftpdMar 31, 2022
- CVE-2008-085222Monitor
freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which tr
MediumCVSS 5.0Proof of conceptEPSS 6%freesshd · freesshdFeb 20, 2008
- CVE-2009-334020Monitor
Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a c
MediumCVSS 5.0No exploitEPSS 1%freesshd · freesshdSep 24, 2009