CVE-2008-2573: Freesshd

High severity, CVSS 8.5. EPSS: 5.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.

Affected products

• Freesshd Freesshd: version 1.2.1 only

Published 2008-06-06. Last modified 2026-06-16.