Freesshd

11 CVEs across 2 Freesshd products. Browse Freesshd vulnerabilities, severities, and proof-of-concept exploits.

Freesshd products with known CVEs

ProductCVEs
Freesshd10
Freeftpd1
Freesshd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-0723Medium5.32024-01-19A vulnerability was found in freeSSHd 1.0.9 on Windows. It has been classified as problematic. This affects an unknown part. The manipulation leads to denial o…
CVE-2022-27052High7.82022-03-31FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
CVE-2018-9853Critical9.82018-07-10Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to a…
CVE-2017-1000475High7.82018-01-24FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.
CVE-2012-60662012-12-04freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modifi…
CVE-2009-33402009-09-24Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in Vu…
CVE-2008-68992009-08-05Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) ope…
CVE-2008-47622008-10-28Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary…
CVE-2008-25732008-06-06Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPEND…
CVE-2008-08522008-02-21freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which triggers a NULL point…
CVE-2006-24072006-05-16Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3)…