GCVE - cpe:2.3:a:sysax_software:multi

Approved changes feed: RSS · Atom

cpe:2.3:a:sysax_software:multi_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sysax Software (`0fef89ec-18c4-5951-aca5-96110edc39e4`)
Product	Multi Server (`822d2e70-eb74-559b-b10f-02fa4251173a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-10060`	vulnerable	2026-06-08 05:00:46.932590	Sysax Multi Server < 5.55 SSH Username Buffer Overflow Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service. Published: 2025-08-13T20:53:55.845Z Updated: 2026-05-26T11:51:31.342Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ssh/sysax_ssh_username.rb https://www.exploit-db.com/exploits/18535 https://www.exploit-db.com/exploits/18557 https://web.archive.org/web/20120302203344/http://www.pwnag3.com/2012/02/sysax-multi-server-ssh-username-exploit.html https://advisories.checkpoint.com/defense/advisories/public/2012/cpai-23-sepc.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.