Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2018-9853

Description

Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to an unprivileged account on the server.

POC

Reference

- https://medium.com/%40TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a

- https://medium.com/@TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a

Github

No PoCs found on GitHub currently.