GoodTech SSH Server SFTP Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	31879
Class:	Boundary Condition Error
CVE:	CVE-2008-4726
Remote:	Yes
Local:	No
Published:	Oct 22 2008 12:00AM
Updated:	Apr 16 2015 05:52PM
Credit:	r0ut3r
Vulnerable:	GoodTech SSH Server 6.4 - Microsoft Windows 95 - Microsoft Windows 98
Not Vulnerable:

GoodTech SSH Server SFTP Multiple Buffer Overflow Vulnerabilities

GoodTech SSH Server is prone to multiple buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer.

An attacker may exploit these issues to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial of service.

These issues affect GoodTech SSH Server 6.4; other versions may also be affected.

GoodTech SSH Server SFTP Multiple Buffer Overflow Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/31879.pl

GoodTech SSH Server SFTP Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GoodTech SSH Server SFTP Multiple Buffer Overflow Vulnerabilities

References:

• GoodTech Systems Homepage (GoodTech Systems)
  
• GoodTech SSH Remote Buffer Overflow Exploit ([email protected] )