| Package | Affected versions | Patched versions |
|---|---|---|
| multi server | < 5.55 | 5.55 |
Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free