CVE-2006-2407
HIGH 7.5EPSS 71.4%
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 71.38% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2006-05-16
- Updated
- 2024-08-07
Proof-of-concept exploits (6)
- http://marc.info/?l=full-disclosure&m=114764338702488&w=2
- http://www.securityfocus.com/archive/1/434007/100/0/threaded
- http://www.securityfocus.com/archive/1/434402/100/0/threaded
- http://www.securityfocus.com/archive/1/434415/100/0/threaded
- http://www.securityfocus.com/archive/1/434415/30/4920/threaded
- http://www.securityfocus.com/archive/1/434038/100/0/threaded
Metasploit modules (1)
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/16462
- https://www.exploit-db.com/exploits/16461
- https://www.exploit-db.com/exploits/1787