Georgia SoftWorks Secure Shell Server Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	27103
Class:	Unknown
CVE:	CVE-2008-0096
Remote:	Yes
Local:	No
Published:	Jan 02 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Luigi Auriemma discovered these issues.
Vulnerable:	Georgia SoftWorks Secure Shell Server 7.1.3
Not Vulnerable:

Georgia SoftWorks Secure Shell Server Multiple Remote Code Execution Vulnerabilities

Georgia SoftWorks Secure Shell Server is prone to multiple remote code-execution vulnerabilities:

- A format-string vulnerability
- Two buffer-overflow vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges, facilitating the complete compromise of affected computers.

Georgia SoftWorks Secure Shell Server 7.01.0003 is vulnerable to these issues; other versions may also be affected.

Georgia SoftWorks Secure Shell Server Multiple Remote Code Execution Vulnerabilities

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/gswsshit.zip

Georgia SoftWorks Secure Shell Server Multiple Remote Code Execution Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Georgia SoftWorks Secure Shell Server Multiple Remote Code Execution Vulnerabilities

References:

• Secure Shell Server Product Page (Georgia SoftWorks)
  
• Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003 (Luigi Auriemma )