CVE-2008-6899: Freesshd

High severity, CVSS 9.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command.

Affected products

• Freesshd Freesshd: version 1.2.1 only

Published 2009-08-05. Last modified 2026-06-16.