CVE-2006-3252

Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

62.21% chance of exploitation in the next 30 days, 99th percentile

Published

2006-06-27

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/privatewire_gateway…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16760
• https://www.exploit-db.com/exploits/2680

References

• CVE Record
• NVD entry

Related

• CVE-2006-3250
• CVE-2006-3253
• CVE-2006-3245
• CVE-2006-3254
• CVE-2006-3228
• CVE-2006-3255