A local stack-based buffer overflow in yTree 1.94-1.1 allows unauthenticated attackers to achieve arbitrary code execution on the host system.

The application fails to properly validate the length of command-line arguments, leading to a stack-based buffer overflow (CWE-787). An unauthenticated local attacker can supply a crafted argument containing shellcode to overwrite the stack and execute code in the application context.

Successful exploitation grants an attacker the ability to execute arbitrary code with the privileges of the user running the yTree application. Given the CVSS score of 8.4, this vulnerability represents a significant risk to system integrity and confidentiality. If the application is executed by a high-privilege user, the impact could lead to full system compromise.

Immediate Action: There is currently no official patch available for this legacy version of yTree. Users should restrict execution permissions for the yTree binary to authorized users only and avoid running the application with elevated privileges.

Proactive Monitoring: Monitor system logs for unexpected segmentation faults or abnormal process terminations related to the yTree binary, which may indicate failed exploitation attempts.

Compensating Controls: Implement strict file system permissions to limit which users can invoke the yTree executable, effectively reducing the attack surface for local users.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit-DB entry 39406.

Due to the lack of an available patch and the presence of a functional proof-of-concept, users are strongly advised to remove the yTree software from production environments. If the tool is required, ensure it is executed in a restricted, non-privileged environment to minimize the potential impact of a successful exploit.