CVE-2008-4726: Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to...

Security readout for executives and security teams

GoodTech SSH 6.4 has a reported SFTP buffer overflow that can let an authenticated remote user run arbitrary code. The business risk is mainly for legacy systems still running this version and allowing SFTP logins. There is no KEV listing in the bundle, but public exploit references exist. Exposure is likely limited to environments running GoodTech SSH 6.4 with SFTP reachable by authenticated users. Internet-facing SSH/SFTP services, shared accounts, weak credentials, or broad partner access increase practical risk. The supplied affected-product metadata is incomplete beyond the CVE description. Treat this as a high-priority legacy exposure issue if GoodTech SSH 6.4 is still deployed. It combines authenticated remote code execution potential with public exploit references, but urgency depends on whether the product is present and reachable. Mitigation focus: Identify and retire or replace GoodTech SSH 6.4 installations.; Check vendor or archival guidance for any fixed GoodTech SSH release.; Disable SFTP where it is not required..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.