Samhain Labs develops security and file-integrity monitoring tools, principally the Samhain host-based intrusion-detection system and HSFTP secure file-transfer product, with the durable vulnerability signal centered on input-validation handling in these edge-facing components. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Samhain Labs over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0159HIGH Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string | Mar 15, 2004 | 7.5 | 32 | NO | YES |
CVE-2009-4810HIGH The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to byp | Apr 23, 2010 | 7.5 | 22 | NO | NO |
CVE-2004-2409HIGH Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code. | Dec 31, 2004 | 7.2 | 18 | NO | NO |
Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer dereference). | Dec 31, 2004 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Samhain Labs.
Media articles that mention a CVE ID that affects a product developed by Samhain Labs — matched by CVE ID, not by vendor name.