CVE

Id
30214  
CVE No.
CVE-2008-0097  
Status
Candidate  
Description
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message.  
Phase
Assigned (20080107)  
Votes
None (candidate not yet proposed)  
Comments