7.5
CVSSv2

CVE-2006-2407

Published: 16/05/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 765
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote malicious users to execute arbitrary code via a long key exchange algorithm string.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

freesshd freesshd 1.0.9

weonlydo wodsshserver 1.2.7

weonlydo wodsshserver 1.3.3_demo

freeftpd freeftpd 1.0.10

Exploits

## # $Id: freesshd_key_exchangerb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...
## # $Id: freeftpd_key_exchangerb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...
#!/usr/bin/env python """ Coded by Tauqeer Ahmad aka 0x-Scientist-x0 ahmadtauqeer[at]yahoocom Disclaimer: This Proof of concept exploit is for educational purpose only Please do not use it against any system without prior permission You are responsible for yourself for what you do with this code Greetings: All the Paki ...